PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-EN

Page1of28TableofContentsPrivacyPolicy.
21.
Definitions22.
NameandAddressofthecontroller43.
Cookies44.
Collectionofgeneraldataandinformation65.
Registrationonourwebsite66.
Subscriptiontoournewsletters77.
Newsletter-Tracking88.
Contactpossibilityviathewebsite.
89.
Routineerasureandblockingofpersonaldata810.
Rightsofthedatasubject.
811.
Dataprotectionforapplicationsandtheapplicationprocedures.
1212.
DataprotectionprovisionsabouttheapplicationanduseofAdobeAnalytics(Omniture)/Adobemarketingcloud.
1313.
DataprotectionprovisionsabouttheapplicationanduseofFacebook1414.
DataprotectionprovisionsabouttheapplicationanduseofGettyImagesPhotos1515.
DataprotectionprovisionsabouttheapplicationanduseofGoogleAdSense.
1616.
DataprotectionprovisionsabouttheapplicationanduseofGoogleAnalytics(withanonymizationfunction)1717.
DataprotectionprovisionsabouttheapplicationanduseofGoogleRemarketing.
1818.
DataprotectionprovisionsabouttheapplicationanduseofGoogle+1919.
DataprotectionprovisionsabouttheapplicationanduseofGoogle-AdWords.
2020.
DataprotectionprovisionsabouttheapplicationanduseofInstagram.
2221.
DataprotectionprovisionsabouttheapplicationanduseofLinkedIn.
2222.
DataprotectionprovisionsabouttheapplicationanduseofTwitter.
2323.
DataprotectionprovisionsabouttheapplicationanduseofXing.
2424.
DataprotectionprovisionsabouttheapplicationanduseofYouTube.
2525.
DataprotectionprovisionsabouttheapplicationanduseofMouseflow.
2626.
PaymentMethod:DataprotectionprovisionsabouttheuseofPayPalasapaymentprocessor.
.
2627.
Legalbasisfortheprocessing.
2728.
Thelegitimateinterestspursuedbythecontrollerorbyathirdparty2729.
Periodforwhichthepersonaldatawillbestored.
2730.
Provisionofpersonaldataasstatutoryorcontractualrequirement;2831.
Existenceofautomateddecision-making.
28PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage2of28PrivacyPolicyWeareverydelightedthatyouhaveshowninterestinourenterprise.
Dataprotectionisofapartic-ularlyhighpriorityforthemanagementoftheBRUGGGroupandtheirsubsidiaries.
TheuseoftheInternetpagesoftheBRUGGGroupandtheirsubsidiariesispossiblewithoutanyindicationofper-sonaldata;however,ifadatasubjectwantstousespecialenterpriseservicesviaourwebsite,pro-cessingofpersonaldatacouldbecomenecessary.
Iftheprocessingofpersonaldataisnecessaryandthereisnostatutorybasisforsuchprocessing,wegenerallyobtainconsentfromthedatasubject.
Theprocessingofpersonaldata,suchasthename,address,e-mailaddress,ortelephonenumberofadatasubjectshallalwaysbeinlinewiththeGeneralDataProtectionRegulation(GDPR),andinaccordancewiththecountry-specificdataprotectionregulationsapplicabletotheBRUGGGroupandtheirsubsidiaries.
Bymeansofthisdataprotectiondeclaration,ourenterprisewouldliketoinformthegeneralpublicofthenature,scope,andpurposeofthepersonaldatawecollect,useandprocess.
Furthermore,datasubjectsareinformed,bymeansofthisdataprotectiondeclaration,oftherightstowhichtheyareentitled.
Asthecontroller,theBRUGGGroupandtheirsubsidiarieshaveimplementednumeroustechnicalandorganizationalmeasurestoensurethemostcompleteprotectionofpersonaldataprocessedthroughthiswebsite.
However,Internet-baseddatatransmissionsmayinprinciplehavesecuritygaps,soabsoluteprotectionmaynotbeguaranteed.
Forthisreason,everydatasubjectisfreetotransferpersonaldatatousviaalternativemeans,e.
g.
bytelephone.
1.
DefinitionsThedataprotectiondeclarationoftheBRUGGGroupandtheirsubsidiariesisbasedonthetermsusedbytheEuropeanlegislatorfortheadoptionoftheGeneralDataProtectionRegulation(GDPR).
Ourdataprotectiondeclarationshouldbelegibleandunderstandableforthegeneralpublic,aswellasourcustomersandbusinesspartners.
Toensurethis,wewouldliketofirstexplaintheterminologyused.
Inthisdataprotectiondeclaration,weuse,interalia,thefollowingterms:a)PersonaldataPersonaldatameansanyinformationrelatingtoanidentifiedoridentifiablenaturalperson("datasubject").
Anidentifiablenaturalpersonisonewhocanbeidentified,directlyorindirectly,inpartic-ularbyreferencetoanidentifiersuchasaname,anidentificationnumber,locationdata,anonlineidentifierortooneormorefactorsspecifictothephysical,physiological,genetic,mental,economic,culturalorsocialidentityofthatnaturalperson.
b)DatasubjectDatasubjectisanyidentifiedoridentifiablenaturalperson,whosepersonaldataisprocessedbythecontrollerresponsiblefortheprocessing.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage3of28c)ProcessingProcessingisanyoperationorsetofoperationswhichisperformedonpersonaldataoronsetsofpersonaldata,whetherornotbyautomatedmeans,suchascollection,recording,organization,structuring,storage,adaptationoralteration,retrieval,consultation,use,disclosurebytransmission,disseminationorotherwisemakingavailable,alignmentorcombination,restriction,erasureorde-struction.
d)RestrictionofprocessingRestrictionofprocessingisthemarkingofstoredpersonaldatawiththeaimoflimitingtheirpro-cessinginthefuture.
e)ProfilingProfilingmeansanyformofautomatedprocessingofpersonaldataconsistingoftheuseofpersonaldatatoevaluatecertainpersonalaspectsrelatingtoanaturalperson,inparticulartoanalyzeorpredictaspectsconcerningthatnaturalperson'sperformanceatwork,economicsituation,health,personalpreferences,interests,reliability,behavior,locationormovements.
f)PseudonymizationPseudonymizationistheprocessingofpersonaldatainsuchamannerthatthepersonaldatacannolongerbeattributedtoaspecificdatasubjectwithouttheuseofadditionalinformation,providedthatsuchadditionalinformationiskeptseparatelyandissubjecttotechnicalandorganizationalmeasurestoensurethatthepersonaldataarenotattributedtoanidentifiedoridentifiablenaturalperson.
g)ControllerorcontrollerresponsiblefortheprocessingControllerorcontrollerresponsiblefortheprocessingisthenaturalorlegalperson,publicauthority,agencyorotherbodywhich,aloneorjointlywithothers,determinesthepurposesandmeansoftheprocessingofpersonaldata;wherethepurposesandmeansofsuchprocessingaredeterminedbyUnionorMemberStatelaw,thecontrollerorthespecificcriteriaforitsnominationmaybeprovidedforbyUnionorMemberStatelaw.
h)ProcessorProcessorisanaturalorlegalperson,publicauthority,agencyorotherbodywhichprocessesper-sonaldataonbehalfofthecontroller.
i)RecipientRecipientisanaturalorlegalperson,publicauthority,agencyoranotherbody,towhichthepersonaldataaredisclosed,whetherathirdpartyornot.
However,publicauthoritieswhichmayreceiveper-sonaldataintheframeworkofaparticularinquiryinaccordancewithUnionorMemberStatelawshallnotberegardedasrecipients;theprocessingofthosedatabythosepublicauthoritiesshallbeincompliancewiththeapplicabledataprotectionrulesaccordingtothepurposesoftheprocessing.
j)ThirdpartyThirdpartyisanaturalorlegalperson,publicauthority,agencyorbodyotherthanthedatasubject,controller,processorandpersonswho,underthedirectauthorityofthecontrollerorprocessor,areauthorizedtoprocesspersonaldata.
k)ConsentPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage4of28Consentofthedatasubjectisanyfreelygiven,specific,informedandunambiguousindicationofthedatasubject'swishesbywhichheorshe,byastatementorbyaclearaffirmativeaction,signifiesagreementtotheprocessingofpersonaldatarelatingtohimorher.
2.
NameandAddressofthecontrollerControllerforthepurposesoftheGeneralDataProtectionRegulation(GDPR),otherdataprotec-tionlawsapplicableinMemberstatesoftheEuropeanUnionandotherprovisionsrelatedtodataprotectionis:BRUGGGROUPAGDataProtectionCoordinatorIndustriestrasse19CH-5200BruggTel.
:+41564603131E-Mail:privacy@brugg.
comWebsite:www.
brugg.
com3.
CookiesThisCookiePolicyappliestothewebsitesaccessibleunder"brugg.
com",("fatzer.
com","geo-brugg.
com","pipesystems.
com","rittmeyer.
com","brugglifting.
com","bruggeconnect.
com")(the"website").
Thiswebsiteusescookies.
Cookiesaresmallfilescontainingcertaininformationthatarestoredonyourdevice.
CookiesareservedeitherbyBRUGGGROUPAGorsubsidiariesofBRUGGGROUPAG("BRUGG")–so-called"firstpartycookies"–orbythirdpartiesprovidingservicestoBRUGG;suchcookiesarereferredtoas"thirdpartycookies".
Cookiesarenecessarytoprovidecertainfunctionalitiesonawebsite,e.
g.
tomaintainalanguagechoicemadebyauser.
Moreover,cookiesenabletherespectiveissuer(BRUGGorathirdparty)torecognizethatthewebsitewaspreviouslycalledupbyacertainenddevice,allowingtheidentifica-tionofreturningvisitors(orrathertheirenddevices)andgatheringinformationabouttheirusageofthewebsiteandtheirpresumedinterests.
ThisinformationisusedtoimprovethewebsiteandtodeliverrelevantadvertisementforBRUGGproductsandservicesonthewebsiteaswellasonthirdpartysites.
Cookiescanbeassignedtofourcategories,dependingontheirfunctionandintendedpurpose:strictlynecessarycookies,performancecookies,functionalitycookies,andmarketingcookies.
StrictlyNecessaryCookiesThesecookiesareessentialinordertoenableyoutomovearoundthewebsiteanduseitsfeatures,suchassettingyourprivacypreferences,logginginorfillinginforms.
Withoutthesecookies,servicesrequestedthroughusageofourwebsitecannotbeproperlyprovided.
Strictlynecessarycookiesdonotrequireconsentfromtheuserunderapplicablelaw.
Youmaycon-figureyourwebbrowsertoblockstrictlynecessarycookies,butyoumightthennotbeabletousethewebsite'sfunctionalitiesasintended.
Totheextentthatinformationprocessedinconnectionwithstrictlynecessarycookiesshouldqualifyaspersonaldatainagivencase,thelegalgroundforthatprocessingisBRUGG'legitimateinteresttooperatethewebsite.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage5of28PerformanceCookiesThesecookiescollectinformationabouthowvisitorsuseawebsite,forinstancewhichpagesvisitorsgotomostoften,andhowvisitorsmovearoundthesite.
Theyhelpustoimprovetheuserfriendli-nessofawebsiteandthereforeenhancetheuser'sexperience.
Furtherinformationcollectedbyperformancecookiesmayincludee.
g.
:internetbrowserandoper-atingsystemused,thedomainnameofthewebsitewhichyoupreviouslyvisited,thenumberofvisits,averagedurationofvisit,andpagescalledup.
Theinformationcollectedbythesecookiesisaggregatedandcannormallynotbelinkedtoaspecificnaturalperson.
Totheextentthatinformationprocessedinconnectionwithperformancecookiesshould,inagivencase,qualifyaspersonaldata,thelegalgroundforthatprocessingistheuser'sconsent.
FunctionalityCookiesThesecookiesallowthewebsitetorememberchoicesyoumakeorinformationyouenter(suchasyourusername,languageortheregionyouarein)andprovideenhanced,morepersonalfeatures.
Theyarealsousedtoenablerequestedfunctionssuchasplayingvideos.
Totheextentthatinformationprocessedinconnectionwithfunctionalitycookiesshould,inagivencase,qualifyaspersonaldata,thelegalgroundforthatprocessingistheuser'sconsent.
MarketingCookiesMarketingcookies(alsoreferredtoastargetingoradvertisingcookies)areusedtodeliveradvertsonthirdpartywebsitesmorerelevanttoyouandyourinterests.
Theyarealsousedtolimitthenum-beroftimesyouseeanadvertisementaswellashelpmeasuretheeffectivenessofanadvertisingcampaign.
Legalbasisfortheprocessingofpersonaldatainconnectionwithmarketingcookies(ifany)istheuser'sconsent.
TheInternetpagesoftheBRUGGGroupandtheirsubsidiariesusecookies.
CookiesaretextfilesthatarestoredinacomputersystemviaanInternetbrowser.
ManyInternetsitesandserversusecookies.
Manycookiescontainaso-calledcookieID.
AcookieIDisauniqueidentifierofthecookie.
ItconsistsofacharacterstringthroughwhichInternetpagesandserverscanbeassignedtothespecificInternetbrowserinwhichthecookiewasstored.
ThisallowsvisitedInternetsitesandserverstodifferentiatetheindividualbrowserofthedatasubjectfromotherInternetbrowsersthatcontainothercookies.
AspecificInternetbrowsercanberecognizedandidentifiedusingtheuniquecookieID.
Throughtheuseofcookies,theBRUGGGroupandtheirsubsidiariescanprovidetheusersofthiswebsitewithmoreuser-friendlyservicesthatwouldnotbepossiblewithoutthecookiesetting.
Bymeansofacookie,theinformationandoffersonourwebsitecanbeoptimizedwiththeuserinmind.
Cookiesallowus,aspreviouslymentioned,torecognizeourwebsiteusers.
Thepurposeofthisrecognitionistomakeiteasierforuserstoutilizeourwebsite.
Thewebsiteuserthatusescookies,e.
g.
doesnothavetoenteraccessdataeachtimethewebsiteisaccessed,becausethisistakenoverbythewebsite,andthecookieisthusstoredontheuser'scomputersystem.
Anotherexampleisthecookieofashoppingcartinanonlineshop.
Theonlinestoreremembersthearticlesthatacustomerhasplacedinthevirtualshoppingcartviaacookie.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage6of28Thedatasubjectmay,atanytime,preventthesettingofcookiesthroughourwebsitebymeansofacorrespondingsettingoftheInternetbrowserused,andmaythuspermanentlydenythesettingofcookies.
Furthermore,alreadysetcookiesmaybedeletedatanytimeviaanInternetbrowserorothersoftwareprograms.
ThisispossibleinallpopularInternetbrowsers.
Ifthedatasubjectdeac-tivatesthesettingofcookiesintheInternetbrowserused,notallfunctionsofourwebsitemaybeentirelyusable.
4.
CollectionofgeneraldataandinformationThewebsiteoftheBRUGGGroupandtheirsubsidiariescollectsaseriesofgeneraldataandinfor-mationwhenadatasubjectorautomatedsystemcallsupthewebsite.
Thisgeneraldataandinfor-mationarestoredintheserverlogfiles.
Collectedmaybe…(1)thebrowsertypesandversionsused;(2)theoperatingsystemusedbytheaccessingsystem;(3)thewebsitefromwhichanaccessingsystemreachesourwebsite(so-calledreferrers);(4)thesub-websites;(5)thedateandtimeofaccesstotheInternetsite;(6)anInternetprotocoladdress(IPaddress);(7)theInternetserviceprovideroftheaccessingsystem,and(8)anyothersimilardataandinformationthatmaybeusedintheeventofattacksonourinfor-mationtechnologysystems.
Whenusingthesegeneraldataandinformation,theBRUGGGroupandtheirsubsidiariesdoesnotdrawanyconclusionsaboutthedatasubject.
Rather,thisinformationisneededto:(1)deliverthecontentofourwebsitecorrectly;(2)optimizethecontentofourwebsiteaswellasitsadvertisement;(3)ensurethelong-termviabilityofourinformationtechnologysystemsandwebsitetechnol-ogy,and(4)providelawenforcementauthoritieswiththeinformationnecessaryforcriminalprosecutionincaseofacyber-attack.
Therefore,theBRUGGGroupandtheirsubsidiariesanalyzesanonymouslycollecteddataandinfor-mationstatistically,withtheaimofincreasingthedataprotectionanddatasecurityofourenter-prise,andtoensureanoptimallevelofprotectionforthepersonaldataweprocess.
Theanonymousdataoftheserverlogfilesarestoredseparatelyfromallpersonaldataprovidedbyadatasubject.
5.
RegistrationonourwebsiteThedatasubjecthasthepossibilitytoregisteronthewebsiteofthecontrollerwiththeindicationofpersonaldata.
Whichpersonaldataaretransmittedtothecontrollerisdeterminedbytherespectiveinputmaskusedfortheregistration.
Thepersonaldataenteredbythedatasubjectarecollectedandstoredexclusivelyforinternalusebythecontroller,andforhisownpurposes.
Thecontrollermayrequesttransfertooneormoreprocessors(e.
g.
aparcelservice)thatalsousespersonaldataforaninternalpurposewhichisattributabletothecontroller.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage7of28Byregisteringonthewebsiteofthecontroller,theIPaddress—assignedbytheInternetservicepro-vider(ISP)andusedbythedatasubject—date,andtimeoftheregistrationarealsostored.
Thestor-ageofthisdatatakesplaceagainstthebackgroundthatthisistheonlywaytopreventthemisuseofourservices,and,ifnecessary,tomakeitpossibletoinvestigatecommittedoffenses.
Insofar,thestorageofthisdataisnecessarytosecurethecontroller.
Thisdataisnotpassedontothirdpartiesunlessthereisastatutoryobligationtopassonthedata,orifthetransferservestheaimofcriminalprosecution.
Theregistrationofthedatasubject,withthevoluntaryindicationofpersonaldata,isintendedtoenablethecontrollertoofferthedatasubjectcontentsorservicesthatmayonlybeofferedtoreg-isteredusersduetothenatureofthematterinquestion.
Registeredpersonsarefreetochangethepersonaldataspecifiedduringtheregistrationatanytime,ortohavethemcompletelydeletedfromthedatastockofthecontroller.
Thedatacontrollershall,atanytime,provideinformationuponrequesttoeachdatasubjectastowhatpersonaldataarestoredaboutthedatasubject.
Inaddition,thedatacontrollershallcorrectorerasepersonaldataattherequestorindicationofthedatasubject,insofarastherearenostatu-torystorageobligations.
Theentiretyofthecontroller'semployeesareavailabletothedatasubjectinthisrespectascontactpersons.
6.
SubscriptiontoournewslettersOnthewebsiteoftheBRUGGGroupandtheirsubsidiaries,usersaregiventheopportunitytosub-scribetoourenterprise'snewsletter.
Theinputmaskusedforthispurposedetermineswhatpersonaldataaretransmitted,aswellaswhenthenewsletterisorderedfromthecontroller.
TheBRUGGGroupandtheirsubsidiariesinformsitscustomersandbusinesspartnersregularlybymeansofanewsletteraboutenterpriseoffers.
Theenterprise'snewslettermayonlybereceivedbythedatasubjectif(1)thedatasubjecthasavalide-mailaddressand(2)thedatasubjectregistersforthenewslettershipping.
Aconfirmatione-mailwillbesenttothee-mailaddressregisteredbyadatasubjectforthefirsttimefornewslettershipping,forlegalreasons,inthedoubleopt-inprocedure.
Thisconfirmatione-mailisusedtoprovewhethertheownerofthee-mailaddressasthedatasubjectisauthorizedtoreceivethenewsletter.
Duringtheregistrationforthenewsletter,wealsostoretheIPaddressofthecomputersystemas-signedbytheInternetserviceprovider(ISP)andusedbythedatasubjectatthetimeoftheregistra-tion,aswellasthedateandtimeoftheregistration.
Thecollectionofthisdataisnecessaryinordertounderstandthe(possible)misuseofthee-mailaddressofadatasubjectatalaterdate,anditthereforeservestheaimofthelegalprotectionofthecontroller.
Thepersonaldatacollectedaspartofaregistrationforthenewsletterwillonlybeusedtosendournewsletter.
Inaddition,subscriberstothenewslettermaybeinformedbye-mail,aslongasthisisPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage8of28necessaryfortheoperationofthenewsletterserviceoraregistrationinquestion,asthiscouldbethecaseintheeventofmodificationstothenewsletteroffer,orintheeventofachangeintechnicalcircumstances.
Therewillbenotransferofpersonaldatacollectedbythenewsletterservicetothirdparties.
Thesubscriptiontoournewslettermaybeterminatedbythedatasubjectatanytime.
Theconsenttothestorageofpersonaldata,whichthedatasubjecthasgivenforshippingthenewsletter,mayberevokedatanytime.
Forthepurposeofrevocationofconsent,acorrespondinglinkisfoundineachnewsletter.
Itisalsopossibletounsubscribefromthenewsletteratanytimedirectlyonthewebsiteofthecontroller,ortocommunicatethistothecontrollerinadifferentway.
7.
Newsletter-TrackingThenewsletteroftheBRUGGGroupandtheirsubsidiariescontainsso-calledtrackingpixels.
Atrack-ingpixelisaminiaturegraphicembeddedinsuche-mails,whicharesentinHTMLformattoenablelogfilerecordingandanalysis.
Thisallowsastatisticalanalysisofthesuccessorfailureofonlinemarketingcampaigns.
Basedontheembeddedtrackingpixel,theBRUGGGroupandtheirsubsidiar-iesmayseeifandwhenane-mailwasopenedbyadatasubject,andwhichlinksinthee-mailwerecalledupbydatasubjects.
Suchpersonaldatacollectedinthetrackingpixelscontainedinthenewslettersarestoredandana-lyzedbythecontrollerinordertooptimizetheshippingofthenewsletter,aswellastoadaptthecontentoffuturenewslettersevenbettertotheinterestsofthedatasubject.
Thesepersonaldatawillnotbepassedontothirdparties.
Datasubjectsareatanytimeentitledtorevoketherespectiveseparatedeclarationofconsentissuedbymeansofthedouble-opt-inprocedure.
Afterarevocation,thesepersonaldatawillbedeletedbythecontroller.
TheBRUGGGroupandtheirsubsidiariesauto-maticallyregardsawithdrawalfromthereceiptofthenewsletterasarevocation.
8.
ContactpossibilityviathewebsiteThewebsiteoftheBRUGGGroupandtheirsubsidiariescontainsinformationthatenablesaquickelectroniccontacttoourenterprise,aswellasdirectcommunicationwithus,whichalsoincludesageneraladdressoftheso-calledelectronicmail(e-mailaddress).
Ifadatasubjectcontactsthecon-trollerbye-mailorviaacontactform,thepersonaldatatransmittedbythedatasubjectareauto-maticallystored.
Suchpersonaldatatransmittedonavoluntarybasisbyadatasubjecttothedatacontrollerarestoredforthepurposeofprocessingorcontactingthedatasubject.
Thereisnotransferofthispersonaldatatothirdparties.
9.
RoutineerasureandblockingofpersonaldataThedatacontrollershallprocessandstorethepersonaldataofthedatasubjectonlyfortheperiodnecessarytoachievethepurposeofstorage,orasfarasthisisgrantedbytheEuropeanlegislatororotherlegislatorsinlawsorregulationstowhichthecontrollerissubjectto.
Ifthestoragepurposeisnotapplicable,orifastorageperiodprescribedbytheEuropeanlegislatororanothercompetentlegislatorexpires,thepersonaldataareroutinelyblockedorerasedinaccord-ancewithlegalrequirements.
10.
Rightsofthedatasubjecta)RightofconfirmationEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatortoobtainfromthecontrollertheconfirmationastowhetherornotpersonaldataconcerninghimorherarebeingprocessed.
IfaPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage9of28datasubjectwishestoavailhimselfofthisrightofconfirmation,heorshemay,atanytime,contactanyemployeeofthecontroller.
b)RightofaccesEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatortoobtainfromthecontrollerfreeinformationabouthisorherpersonaldatastoredatanytimeandacopyofthisinformation.
Furthermore,theEuropeandirectivesandregulationsgrantthedatasubjectaccesstothefollowinginformation:thepurposesoftheprocessing;thecategoriesofpersonaldataconcerned;therecipientsorcategoriesofrecipientstowhomthepersonaldatahavebeenorwillbedisclosed,inparticularrecipientsinthirdcountriesorinternationalorganizations;wherepossible,theenvisagedperiodforwhichthepersonaldatawillbestored,or,ifnotpossible,thecriteriausedtodeterminethatperiod;theexistenceoftherighttorequestfromthecontrollerrectificationorerasureofpersonaldata,orrestrictionofprocessingofpersonaldataconcerningthedatasubject,ortoobjecttosuchprocessing;theexistenceoftherighttolodgeacomplaintwithasupervisoryauthority;wherethepersonaldataarenotcollectedfromthedatasubject,anyavailableinformationastotheirsource;theexistenceofautomateddecision-making,includingprofiling,referredtoinArticle22(1)and(4)oftheGDPRand,atleastinthosecases,meaningfulinformationaboutthelogicin-volved,aswellasthesignificanceandenvisagedconsequencesofsuchprocessingforthedatasubject.
Furthermore,thedatasubjectshallhavearighttoobtaininformationastowhetherpersonaldataaretransferredtoathirdcountryortoaninternationalorganization.
Wherethisisthecase,thedatasubjectshallhavetherighttobeinformedoftheappropriatesafeguardsrelatingtothetransfer.
Ifadatasubjectwishestoavailhimselfofthisrightofaccess,heorshemay,atanytime,contactanyemployeeofthecontroller.
c)RighttorectificationEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatortoobtainfromthecontrollerwithoutunduedelaytherectificationofinaccuratepersonaldataconcerninghimorher.
Takingintoaccountthepurposesoftheprocessing,thedatasubjectshallhavetherighttohaveincompletepersonaldatacompleted,includingbymeansofprovidingasupplementarystatement.
Ifadatasubjectwishestoexercisethisrighttorectification,heorshemay,atanytime,contactanyemployeeofthecontroller.
d)Righttoerasure(Righttobeforgotten)PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage10of28EachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatortoobtainfromthecontrollertheerasureofpersonaldataconcerninghimorherwithoutunduedelay,andthecontrollershallhavetheobligationtoerasepersonaldatawithoutunduedelaywhereoneofthefollowinggroundsapplies,aslongastheprocessingisnotnecessary:Thepersonaldataarenolongernecessaryinrelationtothepurposesforwhichtheywerecollectedorotherwiseprocessed.
Thedatasubjectwithdrawsconsenttowhichtheprocessingisbasedaccordingtopoint(a)ofArticle6(1)oftheGDPR,orpoint(a)ofArticle9(2)oftheGDPR,andwherethereisnootherlegalgroundfortheprocessing.
ThedatasubjectobjectstotheprocessingpursuanttoArticle21(1)oftheGDPRandtherearenooverridinglegitimategroundsfortheprocessing,orthedatasubjectobjectstotheprocessingpur-suanttoArticle21(2)oftheGDPR.
Thepersonaldatahavebeenunlawfullyprocessed.
ThepersonaldatamustbeerasedforcompliancewithalegalobligationinUnionorMemberStatelawtowhichthecontrollerissubject.
ThepersonaldatahavebeencollectedinrelationtotheofferofinformationsocietyservicesreferredtoinArticle8(1)oftheGDPR.
Ifoneoftheaforementionedreasonsapplies,andadatasubjectwishestorequesttheerasureofpersonaldatastoredbytheBRUGGGroupandtheirsubsidiaries,heorshemay,atanytime,contactanyemployeeofthecontroller.
AnemployeeofBRUGGGroupandtheirsubsidiariesshallpromptlyensurethattheerasurerequestiscompliedwithimmediately.
WherethecontrollerhasmadepersonaldatapublicandisobligedpursuanttoArticle17(1)toerasethepersonaldata,thecontroller,takingaccountofavailabletechnologyandthecostofimplemen-tation,shalltakereasonablesteps,includingtechnicalmeasures,toinformothercontrollerspro-cessingthepersonaldatathatthedatasubjecthasrequestederasurebysuchcontrollersofanylinksto,orcopyorreplicationof,thosepersonaldata,asfarasprocessingisnotrequired.
AnemployeeoftheBRUGGGrouporoneoftheirsubsidiarywillarrangethenecessarymeasuresinindividualcases.
e)RightofrestrictionofprocessingEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatortoobtainfromthecontrollerrestrictionofprocessingwhereoneofthefollowingapplies:Theaccuracyofthepersonaldataiscontestedbythedatasubject,foraperiodenablingthecontrol-lertoverifytheaccuracyofthepersonaldata.
Theprocessingisunlawfulandthedatasubjectopposestheerasureofthepersonaldataandre-questsinsteadtherestrictionoftheiruseinstead.
Thecontrollernolongerneedsthepersonaldataforthepurposesoftheprocessing,buttheyarerequiredbythedatasubjectfortheestablishment,exerciseordefenseoflegalclaims.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage11of28ThedatasubjecthasobjectedtoprocessingpursuanttoArticle21(1)oftheGDPRpendingtheveri-ficationwhetherthelegitimategroundsofthecontrolleroverridethoseofthedatasubject.
Ifoneoftheaforementionedconditionsismet,andadatasubjectwishestorequesttherestrictionoftheprocessingofpersonaldatastoredbytheBRUGGGroupandtheirsubsidiaries,heorshemayatanytimecontactanyemployeeofthecontroller.
TheemployeeoftheBRUGGGroupandtheirsubsidiarieswillarrangetherestrictionoftheprocessing.
f)RighttodataportabilityEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislator,toreceivethepersonaldataconcerninghimorher,whichwasprovidedtoacontroller,inastructured,commonlyusedandmachine-readableformat.
Heorsheshallhavetherighttotransmitthosedatatoanothercontrollerwithouthindrancefromthecontrollertowhichthepersonaldatahavebeenprovided,aslongastheprocessingisbasedonconsentpursuanttopoint(a)ofArticle6(1)oftheGDPRorpoint(a)ofArticle9(2)oftheGDPR,oronacontractpursuanttopoint(b)ofArticle6(1)oftheGDPR,andtheprocessingiscarriedoutbyautomatedmeans,aslongastheprocessingisnotnecessaryfortheperformanceofataskcarriedoutinthepublicinterestorintheexerciseofofficialauthorityvestedinthecontrol-ler.
Furthermore,inexercisinghisorherrighttodataportabilitypursuanttoArticle20(1)oftheGDPR,thedatasubjectshallhavetherighttohavepersonaldatatransmitteddirectlyfromonecontrollertoanother,wheretechnicallyfeasibleandwhendoingsodoesnotadverselyaffecttherightsandfreedomsofothers.
Inordertoasserttherighttodataportability,thedatasubjectmayatanytimecontactanyemployeeoftheBRUGGGroupandtheirsubsidiaries.
g)RighttoobjectEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatortoobject,ongroundsrelat-ingtohisorherparticularsituation,atanytime,toprocessingofpersonaldataconcerninghimorher,whichisbasedonpoint(e)or(f)ofArticle6(1)oftheGDPR.
Thisalsoappliestoprofilingbasedontheseprovisions.
TheBRUGGGroupandtheirsubsidiariesshallnolongerprocessthepersonaldataintheeventoftheobjection,unlesswecandemonstratecompellinglegitimategroundsfortheprocessingwhichover-ridetheinterests,rightsandfreedomsofthedatasubject,orfortheestablishment,exerciseorde-fenseoflegalclaims.
IftheBRUGGGroupandtheirsubsidiariesprocessespersonaldatafordirectmarketingpurposes,thedatasubjectshallhavetherighttoobjectatanytimetoprocessingofpersonaldataconcerninghimorherforsuchmarketing.
Thisappliestoprofilingtotheextentthatitisrelatedtosuchdirectmarketing.
IfthedatasubjectobjectstotheBRUGGGroupandtheirsubsidiariestotheprocessingPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage12of28fordirectmarketingpurposes,theBRUGGGroupandtheirsubsidiarieswillnolongerprocessthepersonaldataforthesepurposes.
Inaddition,thedatasubjecthastheright,ongroundsrelatingtohisorherparticularsituation,toobjecttoprocessingofpersonaldataconcerninghimorherbytheBRUGGGroupandtheirsubsidi-ariesforscientificorhistoricalresearchpurposes,orforstatisticalpurposespursuanttoArticle89(1)oftheGDPR,unlesstheprocessingisnecessaryfortheperformanceofataskcarriedoutforreasonsofpublicinterest.
Inordertoexercisetherighttoobject,thedatasubjectmaycontactanyemployeeoftheBRUGGGroupandtheirsubsidiaries.
Inaddition,thedatasubjectisfreeinthecontextoftheuseofinfor-mationsocietyservices,andnotwithstandingDirective2002/58/EC,tousehisorherrighttoobjectbyautomatedmeansusingtechnicalspecifications.
h)Automatedindividualdecision-making,includingprofilingEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatornottobesubjecttoadeci-sionbasedsolelyonautomatedprocessing,includingprofiling,whichproduceslegaleffectsconcern-inghimorher,orsimilarlysignificantlyaffectshimorher,aslongasthedecision(1)isnotisneces-saryforenteringinto,ortheperformanceof,acontractbetweenthedatasubjectandadatacon-troller,or(2)isnotauthorizedbyUnionorMemberStatelawtowhichthecontrollerissubjectandwhichalsolaysdownsuitablemeasurestosafeguardthedatasubject'srightsandfreedomsandlegitimateinterests,or(3)isnotbasedonthedatasubject'sexplicitconsent.
Ifthedecision(1)isnecessaryforenteringinto,ortheperformanceof,acontractbetweenthedatasubjectandadatacontroller,or(2)itisbasedonthedatasubject'sexplicitconsent,theBRUGGGroupandtheirsubsidiariesshallimplementsuitablemeasurestosafeguardthedatasubject'srightsandfreedomsandlegitimateinterests,atleasttherighttoobtainhumaninterventiononthepartofthecontroller,toexpresshisorherpointofviewandcontestthedecision.
Ifthedatasubjectwishestoexercisetherightsconcerningautomatedindividualdecision-making,heorshemay,atanytime,contactanyemployeeoftheBRUGGGroupandtheirsubsidiaries.
i)RighttowithdrawdataprotectionconsentEachdatasubjectshallhavetherightgrantedbytheEuropeanlegislatortowithdrawhisorhercon-senttoprocessingofhisorherpersonaldataatanytime.
Ifthedatasubjectwishestoexercisetherighttowithdrawtheconsent,heorshemay,atanytime,contactanyemployeeoftheBRUGGGroupandtheirsubsidiaries.
11.
DataprotectionforapplicationsandtheapplicationproceduresThedatacontrollershallcollectandprocessthepersonaldataofapplicantsforthepurposeoftheprocessingoftheapplicationprocedure.
Theprocessingmayalsobecarriedoutelectronically.
Thisisthecase,inparticular,ifanapplicantsubmitscorrespondingapplicationdocumentsbye-mailorPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage13of28bymeansofawebformonthewebsitetothecontroller.
Ifthedatacontrollerconcludesanemploy-mentcontractwithanapplicant,thesubmitteddatawillbestoredforthepurposeofprocessingtheemploymentrelationshipincompliancewithlegalrequirements.
Ifnoemploymentcontractiscon-cludedwiththeapplicantbythecontroller,theapplicationdocumentsshallbeautomaticallyerasedsixmonthsafterentering,providedthatnootherlegitimateinterestsofthecontrollerareopposedtotheerasure.
Otherlegitimateinterestinthisrelationis,e.
g.
aburdenofproofinaprocedureundertheGeneralEqualTreatmentAct(AGG).
12.
DataprotectionprovisionsabouttheapplicationanduseofAdobeAnalytics(Omniture)/AdobemarketingcloudOnthiswebsite,thecontrollerhasintegratedcomponentsoftheenterpriseAdobe.
AdobeAnalytics(Omniture)andAdobeMarketingCloud(hereinafterreferredtoas"Omniture")isaninstrumentthatallowsformoreefficientonlinemarketingandwebanalysis.
OmnitureispartofAdobeMarketingCloud.
AdobeMarketingCloudenablesreal-timeanalysisofvisitorflowsonInternetsites.
Thereal-timeanalysisincludesprojectreportsandallowsanad-hocanalysisofsitevisitors.
Customerinter-actionsarepresentedinsuchawayastogivethecontrollerabetteroverviewofusers'onlineactiv-itiesofthiswebsitebydisplayingthedatainsimpleandinteractivedashboardsandconvertingthemintoreports.
Thisenablesthecontrollertoobtaininformationinreal-timeandtoidentifyproblemsthatoccurmorequickly.
TheoperatingcompanyfortheseservicesisAdobeSystemsSoftwareIrelandLimited,4-6Riverwalk,CitywestBusinessCampus,Dublin24,RepublicofIreland.
Omnituresetsacookieontheinformationtechnologysystemofthedatasubject(cookieshaveal-readybeenexplainedinadvance,whichmaybereadabove).
ThecontrollerensuresthatthetrackingdatatransferredtotheAdobedatacenterisanonymizedpriortogeolocation.
TheanonymizationisimplementedbyreplacingthelastpartoftheIPaddress.
Thecontrollerhasmadeserver-sidedset-tings,whichareusedtoanonymizetheIPaddressofthedatasubjectpriortoprocessingforgeolo-cationandrangemeasurement.
Adobewillusethedataandinformationobtainedviaourwebsitetoanalyzetheuserbehaviorofthedatasubjectonbehalfofthecontroller.
Adobewillalsousethedatatocreatereportsonuseractivityonourbehalf,aswellasprovideotherservicestoourenter-priserelatedtotheuseofourwebsite.
TheIPaddressofthedatasubjectisnotmergedwithotherpersonaldatabyAdobe.
Asstatedabove,thedatasubjectmay,atanytime,preventthesettingofcookiesthroughourweb-sitebymeansofacorrespondingsettingoftheInternetbrowserused,andthuspermanentlydenythesettingofcookies.
SuchasettingoftheInternetbrowserusedwouldalsopreventOmniturefromsettingacookieontheinformationtechnologysystemofthedatasubject.
Cookiesmayalsobede-letedbyOmnitureatanytimeviaanInternetbrowserorothersoftwareprograms.
Thedatasubjectalsohasthepossibilityofobjectingtoandpreventingthecollectionofdatagener-atedbytheAdobecookieontheuseofthiswebsiteandtheprocessingofthisdatabyAdobe.
Forthispurpose,thedatasubjectmustclickontheopt-outbuttonunderthelinkPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage14of28http://www.
adobe.
com/de/privacy/opt-out.
html,whichsetsanopt-outcookie.
Theopt-outcookieusedforthispurposeisplacedontheinformationtechnologysystemusedbythedatasubject.
Ifthedatasubjectdeletesthecookiesfromhissystem,thenthedatasubjectmustcallupthelinkagainandsetanewopt-outcookie.
Withthesettingoftheopt-outcookie,however,thepossibilityexiststhatthewebsitesofthecon-trollerarenotfullyusableanymorebythedatasubject.
TheapplicabledataprotectionprovisionsofAdobemaybeaccessedunderhttp://www.
adobe.
com/privacy.
html.
13.
DataprotectionprovisionsabouttheapplicationanduseofFacebookOnthiswebsite,thecontrollerhasintegratedcomponentsoftheenterpriseFacebook.
Facebookisasocialnetwork.
AsocialnetworkisaplaceforsocialmeetingsontheInternet,anonlinecommunity,whichusuallyallowsuserstocommunicatewitheachotherandinteractinavirtualspace.
Asocialnetworkmayserveasaplatformfortheexchangeofopinionsandexperiences,orenabletheInternetcommunitytoprovidepersonalorbusiness-relatedinformation.
Facebookallowssocialnetworkuserstoincludethecreationofprivateprofiles,uploadphotos,andnetworkthroughfriendrequests.
TheoperatingcompanyofFacebookisFacebook,Inc.
,1HackerWay,MenloPark,CA94025,UnitedStates.
IfapersonlivesoutsideoftheUnitedStatesorCanada,thecontrolleristheFacebookIrelandLtd.
,4GrandCanalSquare,GrandCanalHarbour,Dublin2,Ireland.
Witheachcall-uptooneoftheindividualpagesofthisInternetwebsite,whichisoperatedbythecontrollerandintowhichaFacebookcomponent(Facebookplug-ins)wasintegrated,thewebbrowserontheinformationtechnologysystemofthedatasubjectisautomaticallypromptedtodownloaddisplayofthecorrespondingFacebookcomponentfromFacebookthroughtheFacebookcomponent.
AnoverviewofalltheFacebookPlug-insmaybeaccessedunderhttps://developers.
fa-cebook.
com/docs/plugins/.
Duringthecourseofthistechnicalprocedure,Facebookismadeawareofwhatspecificsub-siteofourwebsitewasvisitedbythedatasubject.
IfthedatasubjectisloggedinatthesametimeonFacebook,Facebookdetectswitheverycall-uptoourwebsitebythedatasubject—andfortheentiredurationoftheirstayonourInternetsite—whichspecificsub-siteofourInternetpagewasvisitedbythedatasubject.
ThisinformationiscollectedthroughtheFacebookcomponentandassociatedwiththerespectiveFacebookaccountofthedatasubject.
IfthedatasubjectclicksononeoftheFacebookbuttonsintegratedintoourwebsite,e.
g.
the"Like"button,orifthedatasubjectsubmitsacomment,thenFacebookmatchesthisinformationwiththepersonalFacebookuseraccountofthedatasubjectandstoresthepersonaldata.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage15of28Facebookalwaysreceives,throughtheFacebookcomponent,informationaboutavisittoourweb-sitebythedatasubject,wheneverthedatasubjectisloggedinatthesametimeonFacebookduringthetimeofthecall-uptoourwebsite.
ThisoccursregardlessofwhetherthedatasubjectclicksontheFacebookcomponentornot.
IfsuchatransmissionofinformationtoFacebookisnotdesirableforthedatasubject,thenheorshemaypreventthisbyloggingofffromtheirFacebookaccountbeforeacall-uptoourwebsiteismade.
ThedataprotectionguidelinepublishedbyFacebook,whichisavailableathttps://face-book.
com/about/privacy/,providesinformationaboutthecollection,processinganduseofpersonaldatabyFacebook.
Inaddition,itisexplainedtherewhatsettingoptionsFacebookofferstoprotecttheprivacyofthedatasubject.
Inaddition,differentconfigurationoptionsaremadeavailabletoallowtheeliminationofdatatransmissiontoFacebook.
TheseapplicationsmaybeusedbythedatasubjecttoeliminateadatatransmissiontoFacebook.
14.
DataprotectionprovisionsabouttheapplicationanduseofGettyImagesPhotosOnthiswebsite,thecontrollerhasintegratedcomponentsoftheenterpriseGettyImages.
GettyImagesisanAmericanpictureagency.
Apictureagencyisanenterprisewhichprovidesimagesandotherimagematerialonthemarket.
Generally,pictureagenciesmarketphotographs,illustrationsandfootage.
Apictureagencylicensesdifferentcustomers,inparticularInternetwebsiteoperators,editorsofprintandtelevisionmediaandadvertisingagencies,theimagesusedbythem.
TheoperatingcompanyoftheGettyImagescomponentsisGettyImagesInternational,1stfloor,TheHerbertBuilding,ThePark,Carrickmines,Dublin18,Ireland.
GettyImagesallowstheembeddingofstockimages(wherepossiblyfreeofcharge).
Embeddingistheinclusionorintegrationofanyspecificforeigncontent,e.
g.
text,videoorimagedataprovidedbyaforeignwebsite,andthenappearsontheownwebsite.
Aso-calledembeddedcodeisusedtoembed.
AnembeddedcodeisanHTMLcodethatisintegratedintoawebsitefromawebsiteowner.
Whenanembeddedcodeisintegratedbyawebsiteowner,theexternalcontentoftheotherwebsiteisdisplayedbydefaultimmediately,aslongasawebsiteisvisited.
Todisplaythird-partycontent,theexternalcontentisloadeddirectlyfromtheotherInternetsite.
GettyImagesprovidesfurtherinfor-mationabouttheembeddedofcontentunderhttp://www.
gettyimages.
de/resources/embed.
Throughthetechnicalimplementationoftheembeddedcode,whichallowstheimagedisplayoftheimagesofGettyImages,theIPaddressoftheInternetconnection,throughwhichthedatasubjectaccessesourwebsite,istransmittedtoGettyImages.
Further,GettyImagescollectsourwebsite,browsertype,browserlanguage,andtimeandlengthofaccess.
Inaddition,GettyImagesmaycollectnavigationinformation,whichisinformationaboutwhichofoursubpageshavebeenvisitedbythedatasubjectandwhichlinkshavebeenclickedon,aswellasotherinteractionsthatthedatasubjecthascarriedoutwhenvisitingourwebsite.
ThisdatamaybestoredandanalyzedbyGettyImages.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage16of28FurtherinformationandtheapplicabledataprotectionprovisionsofGettyImagesmayberetrievedunderhttp://www.
gettyimages.
de/company/privacy-policy.
15.
DataprotectionprovisionsabouttheapplicationanduseofGoogleAdSenseOnthiswebsite,thecontrollerhasintegratedGoogleAdSense.
GoogleAdSenseisanonlineservicewhichallowstheplacementofadvertisingonthird-partysites.
GoogleAdSenseisbasedonanalgo-rithmthatselectsadvertisementsdisplayedonthird-partysitestomatchwiththecontentoftherespectivethird-partysite.
GoogleAdSenseallowsaninterest-basedtargetingoftheInternetuser,whichisimplementedbymeansofgeneratingindividualuserprofiles.
TheoperatingcompanyofGoogle'sAdSensecomponentisAlphabetInc.
,1600AmphitheatrePkwy,MountainView,CA94043-1351,UnitedStates.
ThepurposeofGoogle'sAdSensecomponentistheintegrationofadvertisementsonourwebsite.
GoogleAdSenseplacesacookieontheinformationtechnologysystemofthedatasubject.
Thedef-initionofcookiesisexplainedabove.
Withthesettingofthecookie,AlphabetInc.
isenabledtoana-lyzetheuseofourwebsite.
Witheachcall-uptooneoftheindividualpagesofthisInternetsite,whichisoperatedbythecontrollerandintowhichaGoogleAdSensecomponentisintegrated,theInternetbrowserontheinformationtechnologysystemofthedatasubjectwillautomaticallysubmitdatathroughtheGoogleAdSensecomponentforthepurposeofonlineadvertisingandthesettle-mentofcommissionstoAlphabetInc.
Duringthecourseofthistechnicalprocedure,theenterpriseAlphabetInc.
gainsknowledgeofpersonaldata,suchastheIPaddressofthedatasubject,whichservesAlphabetInc.
,interalia,tounderstandtheoriginofvisitorsandclicksandsubsequentlycreatecommissionsettlements.
Thedatasubjectmay,asstatedabove,preventthesettingofcookiesthroughourwebsiteatanytimebymeansofacorrespondingadjustmentofthewebbrowserusedandthuspermanentlydenythesettingofcookies.
SuchanadjustmenttotheInternetbrowserusedwouldalsopreventAlphabetInc.
fromsettingacookieontheinformationtechnologysystemofthedatasubject.
Additionally,cookiesalreadyinusebyAlphabetInc.
maybedeletedatanytimeviaawebbrowserorothersoft-wareprograms.
Furthermore,GoogleAdSensealsousesso-calledtrackingpixels.
Atrackingpixelisaminiaturegraphicthatisembeddedinwebpagestoenablealogfilerecordingandalogfileanalysisthroughwhichastatisticalanalysismaybeperformed.
Basedontheembeddedtrackingpixels,AlphabetInc.
isabletodetermineifandwhenawebsitewasopenedbyadatasubject,andwhichlinkswereclickedonbythedatasubject.
Trackingpixelsserve,interalia,toanalyzetheflowofvisitorsonawebsite.
ThroughGoogleAdSense,personaldataandinformation—whichalsoincludestheIPaddress,andisnecessaryforthecollectionandaccountingofthedisplayedadvertisements—istransmittedtoAl-phabetInc.
intheUnitedStatesofAmerica.
ThesepersonaldatawillbestoredandprocessedinthePRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage17of28UnitedStatesofAmerica.
TheAlphabetInc.
maydisclosethecollectedpersonaldatathroughthistechnicalproceduretothirdparties.
GoogleAdSenseisfurtherexplainedunderthefollowinglinkhttps://www.
google.
com/intl/en/ad-sense/start/.
16.
DataprotectionprovisionsabouttheapplicationanduseofGoogleAnalytics(withanonymizationfunction)Onthiswebsite,thecontrollerhasintegratedthecomponentofGoogleAnalytics(withtheanony-mizerfunction).
GoogleAnalyticsisawebanalyticsservice.
Webanalyticsisthecollection,gathering,andanalysisofdataaboutthebehaviorofvisitorstowebsites.
Awebanalysisservicecollects,interalia,dataaboutthewebsitefromwhichapersonhascome(theso-calledreferrer),whichsub-pageswerevisited,orhowoftenandforwhatdurationasub-pagewasviewed.
Webanalyticsaremainlyusedfortheoptimizationofawebsiteandinordertocarryoutacost-benefitanalysisofInternetadvertising.
TheoperatoroftheGoogleAnalyticscomponentisGoogleInc.
,1600AmphitheatrePkwy,MountainView,CA94043-1351,UnitedStates.
ForthewebanalyticsthroughGoogleAnalyticsthecontrollerusestheapplication"_gat.
_anony-mizeIp".
BymeansofthisapplicationtheIPaddressoftheInternetconnectionofthedatasubjectisabridgedbyGoogleandanonymisedwhenaccessingourwebsitesfromaMemberStateoftheEu-ropeanUnionoranotherContractingStatetotheAgreementontheEuropeanEconomicArea.
ThepurposeoftheGoogleAnalyticscomponentistoanalyzethetrafficonourwebsite.
Googleusesthecollecteddataandinformation,interalia,toevaluatetheuseofourwebsiteandtoprovideonlinereports,whichshowtheactivitiesonourwebsites,andtoprovideotherservicesconcerningtheuseofourInternetsiteforus.
GoogleAnalyticsplacesacookieontheinformationtechnologysystemofthedatasubject.
Thedef-initionofcookiesisexplainedabove.
Withthesettingofthecookie,Googleisenabledtoanalyzetheuseofourwebsite.
Witheachcall-uptooneoftheindividualpagesofthisInternetsite,whichisoperatedbythecontrollerandintowhichaGoogleAnalyticscomponentwasintegrated,theInternetbrowserontheinformationtechnologysystemofthedatasubjectwillautomaticallysubmitdatathroughtheGoogleAnalyticscomponentforthepurposeofonlineadvertisingandthesettlementofcommissionstoGoogle.
Duringthecourseofthistechnicalprocedure,theenterpriseGooglegainsknowledgeofpersonalinformation,suchastheIPaddressofthedatasubject,whichservesGoogle,interalia,tounderstandtheoriginofvisitorsandclicks,andsubsequentlycreatecommissionsettle-ments.
Thecookieisusedtostorepersonalinformation,suchastheaccesstime,thelocationfromwhichtheaccesswasmade,andthefrequencyofvisitsofourwebsitebythedatasubject.
WitheachvisitPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage18of28toourInternetsite,suchpersonaldata,includingtheIPaddressoftheInternetaccessusedbythedatasubject,willbetransmittedtoGoogleintheUnitedStatesofAmerica.
ThesepersonaldataarestoredbyGoogleintheUnitedStatesofAmerica.
Googlemaypassthesepersonaldatacollectedthroughthetechnicalproceduretothirdparties.
Thedatasubjectmay,asstatedabove,preventthesettingofcookiesthroughourwebsiteatanytimebymeansofacorrespondingadjustmentofthewebbrowserusedandthuspermanentlydenythesettingofcookies.
SuchanadjustmenttotheInternetbrowserusedwouldalsopreventGoogleAnalyticsfromsettingacookieontheinformationtechnologysystemofthedatasubject.
Inaddition,cookiesalreadyinusebyGoogleAnalyticsmaybedeletedatanytimeviaawebbrowserorothersoftwareprograms.
Inaddition,thedatasubjecthasthepossibilityofobjectingtoacollectionofdatathataregeneratedbyGoogleAnalytics,whichisrelatedtotheuseofthiswebsite,aswellastheprocessingofthisdatabyGoogleandthechancetoprecludeanysuch.
Forthispurpose,thedatasubjectmustdownloadabrowseradd-onunderthelinkhttps://tools.
google.
com/dlpage/gaoptoutandinstallit.
Thisbrowseradd-ontellsGoogleAnalyticsthroughaJavaScript,thatanydataandinformationaboutthevisitsofInternetpagesmaynotbetransmittedtoGoogleAnalytics.
Theinstallationofthebrowseradd-onsisconsideredanobjectionbyGoogle.
Iftheinformationtechnologysystemofthedatasubjectislaterdeleted,formatted,ornewlyinstalled,thenthedatasubjectmustreinstallthebrowseradd-onstodisableGoogleAnalytics.
Ifthebrowseradd-onwasuninstalledbythedatasubjectoranyotherpersonwhoisattributabletotheirsphereofcompetence,orisdisabled,itispossibletoexe-cutethereinstallationorreactivationofthebrowseradd-ons.
FurtherinformationandtheapplicabledataprotectionprovisionsofGooglemayberetrievedunderhttps://www.
google.
com/intl/en/policies/privacy/andunderhttp://www.
google.
com/analyt-ics/terms/us.
html.
GoogleAnalyticsisfurtherexplainedunderthefollowingLinkhttps://www.
google.
com/analytics/.
17.
DataprotectionprovisionsabouttheapplicationanduseofGoogleRemarketingOnthiswebsite,thecontrollerhasintegratedGoogleRemarketingservices.
GoogleRemarketingisafeatureofGoogleAdWords,whichallowsanenterprisetodisplayadvertisingtoInternetuserswhohavepreviouslyresidedontheenterprise'sInternetsite.
TheintegrationofGoogleRemarketingthereforeallowsanenterprisetocreateuser-basedadvertisingandthusshowsrelevantadvertise-mentstointerestedInternetusers.
TheoperatingcompanyoftheGoogleRemarketingservicesistheGoogleInc.
,1600AmphitheatrePkwy,MountainView,CA94043-1351,UnitedStates.
ThepurposeofGoogleRemarketingistheinsertionofinterest-relevantadvertising.
GoogleRe-marketingallowsustodisplayadsontheGooglenetworkoronotherwebsites,whicharebasedonindividualneedsandmatchedtotheinterestsofInternetusers.
GoogleRemarketingsetsacookieontheinformationtechnologysystemofthedatasubject.
Thedefinitionofcookiesisexplainedabove.
Withthesettingofthecookie,Googleenablesarecognitionofthevisitorofourwebsiteifhecallsupconsecutivewebpages,whicharealsoamemberofthePRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage19of28Googleadvertisingnetwork.
Witheachcall-uptoanInternetsiteonwhichtheservicehasbeenin-tegratedbyGoogleRemarketing,thewebbrowserofthedatasubjectidentifiesautomaticallywithGoogle.
Duringthecourseofthistechnicalprocedure,Googlereceivespersonalinformation,suchastheIPaddressorthesurfingbehaviouroftheuser,whichGoogleuses,interalia,fortheinsertionofinterestrelevantadvertising.
Thecookieisusedtostorepersonalinformation,e.
g.
theInternetpagesvisitedbythedatasubject.
EachtimewevisitourInternetpages,personaldata,includingtheIPaddressoftheInternetaccessusedbythedatasubject,istransmittedtoGoogleintheUnitedStatesofAmerica.
ThesepersonaldataarestoredbyGoogleintheUnitedStatesofAmerica.
Googlemaypassthesepersonaldatacollectedthroughthetechnicalproceduretothirdparties.
Thedatasubjectmay,asstatedabove,preventthesettingofcookiesthroughourwebsiteatanytimebymeansofacorrespondingadjustmentofthewebbrowserusedandthuspermanentlydenythesettingofcookies.
SuchanadjustmenttotheInternetbrowserusedwouldalsopreventGooglefromsettingacookieontheinformationtechnologysystemofthedatasubject.
Inaddition,cookiesalreadyinusebyGooglemaybedeletedatanytimeviaawebbrowserorothersoftwareprograms.
Inaddition,thedatasubjecthasthepossibilityofobjectingtotheinterest-basedadvertisingbyGoogle.
Forthispurpose,thedatasubjectmustcallupthelinktowww.
google.
de/settings/adsandmakethedesiredsettingsoneachInternetbrowserusedbythedatasubject.
FurtherinformationandtheactualdataprotectionprovisionsofGooglemayberetrievedunderhttps://www.
google.
com/intl/en/policies/privacy/.
18.
DataprotectionprovisionsabouttheapplicationanduseofGoogle+Onthiswebsite,thecontrollerhasintegratedtheGoogle+buttonasacomponent.
Google+isaso-calledsocialnetwork.
AsocialnetworkisasocialmeetingplaceontheInternet,anonlinecommu-nity,whichusuallyallowsuserstocommunicatewitheachotherandinteractinavirtualspace.
Asocialnetworkmayserveasaplatformfortheexchangeofopinionsandexperiences,orenabletheInternetcommunitytoprovidepersonalorbusiness-relatedinformation.
Google+allowsusersofthesocialnetworktoincludethecreationofprivateprofiles,uploadphotosandnetworkthroughfriendrequests.
TheoperatingcompanyofGoogle+isGoogleInc.
,1600AmphitheatrePkwy,MountainView,CA94043-1351,UNITEDSTATES.
Witheachcall-uptooneoftheindividualpagesofthiswebsite,whichisoperatedbythecontrollerandonwhichaGoogle+buttonhasbeenintegrated,theInternetbrowserontheinformationtech-nologysystemofthedatasubjectautomaticallydownloadsadisplayofthecorrespondingGoogle+buttonofGooglethroughtherespectiveGoogle+buttoncomponent.
Duringthecourseofthistech-nicalprocedure,Googleismadeawareofwhatspecificsub-pageofourwebsitewasvisitedbythedatasubject.
MoredetailedinformationaboutGoogle+isavailableunderhttps://develop-ers.
google.
com/+/.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage20of28IfthedatasubjectisloggedinatthesametimetoGoogle+,Googlerecognizeswitheachcall-uptoourwebsitebythedatasubjectandfortheentiredurationofhisorherstayonourInternetsite,whichspecificsub-pagesofourInternetpagewerevisitedbythedatasubject.
ThisinformationiscollectedthroughtheGoogle+buttonandGooglematchesthiswiththerespectiveGoogle+accountassociatedwiththedatasubject.
IfthedatasubjectclicksontheGoogle+buttonintegratedonourwebsiteandthusgivesaGoogle+1recommendation,thenGoogleassignsthisinformationtothepersonalGoogle+useraccountofthedatasubjectandstoresthepersonaldata.
GooglestorestheGoogle+1recommendationofthedatasubject,makingitpubliclyavailableinaccordancewiththetermsandconditionsacceptedbythedatasubjectinthisregard.
Subsequently,aGoogle+1recommendationgivenbythedatasubjectonthiswebsitetogetherwithotherpersonaldata,suchastheGoogle+accountnameusedbythedatasubjectandthestoredphoto,isstoredandprocessedonotherGoogleservices,suchassearch-engineresultsoftheGooglesearchengine,theGoogleaccountofthedatasubjectorinotherplaces,e.
g.
onInternetpages,orinrelationtoadvertisements.
GoogleisalsoabletolinkthevisittothiswebsitewithotherpersonaldatastoredonGoogle.
GooglefurtherrecordsthispersonalinformationwiththepurposeofimprovingoroptimizingthevariousGoogleservices.
ThroughtheGoogle+button,Googlereceivesinformationthatthedatasubjectvisitedourwebsite,ifthedatasubjectatthetimeofthecall-uptoourwebsiteisloggedintoGoogle+.
Thisoccursre-gardlessofwhetherthedatasubjectclicksordoesn'tclickontheGoogle+button.
IfthedatasubjectdoesnotwishtotransmitpersonaldatatoGoogle,heorshemaypreventsuchtransmissionbyloggingoutofhisGoogle+accountbeforecallingupourwebsite.
FurtherinformationandthedataprotectionprovisionsofGooglemayberetrievedunderhttps://www.
google.
com/intl/en/policies/privacy/.
MorereferencesfromGoogleabouttheGoogle+1buttonmaybeobtainedunderhttps://developers.
google.
com/+/web/buttons-policy.
19.
DataprotectionprovisionsabouttheapplicationanduseofGoogle-AdWordsOnthiswebsite,thecontrollerhasintegratedGoogleAdWords.
GoogleAdWordsisaserviceforInternetadvertisingthatallowstheadvertisertoplaceadsinGooglesearchengineresultsandtheGoogleadvertisingnetwork.
GoogleAdWordsallowsanadvertisertopre-definespecifickeywordswiththehelpofwhichanadonGoogle'ssearchresultsonlythendisplayed,whentheuserutilizesthesearchenginetoretrieveakeyword-relevantsearchresult.
IntheGoogleAdvertisingNetwork,theadsaredistributedonrelevantwebpagesusinganautomaticalgorithm,takingintoaccountthepreviouslydefinedkeywords.
TheoperatingcompanyofGoogleAdWordsisGoogleInc.
,1600AmphitheatrePkwy,MountainView,CA94043-1351,UNITEDSTATES.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage21of28ThepurposeofGoogleAdWordsisthepromotionofourwebsitebytheinclusionofrelevantadver-tisingonthewebsitesofthirdpartiesandinthesearchengineresultsofthesearchengineGoogleandaninsertionofthird-partyadvertisingonourwebsite.
IfadatasubjectreachesourwebsiteviaaGooglead,aconversioncookieisfiledontheinformationtechnologysystemofthedatasubjectthroughGoogle.
Thedefinitionofcookiesisexplainedabove.
Aconversioncookielosesitsvalidityafter30daysandisnotusedtoidentifythedatasubject.
Ifthecookiehasnotexpired,theconversioncookieisusedtocheckwhethercertainsub-pages,e.
g,theshoppingcartfromanonlineshopsystem,werecalleduponourwebsite.
Throughtheconversioncookie,bothGoogleandthecontrollercanunderstandwhetherapersonwhoreachedanAdWordsadonourwebsitegeneratedsales,thatis,executedorcanceledasaleofgoods.
ThedataandinformationcollectedthroughtheuseoftheconversioncookieisusedbyGoogletocreatevisitstatisticsforourwebsite.
ThesevisitstatisticsareusedinordertodeterminethetotalnumberofuserswhohavebeenservedthroughAdWordsadstoascertainthesuccessorfailureofeachAdWordsadandtooptimizeourAdWordsadsinthefuture.
NeitherourcompanynorotherGoogleAdWordsadvertisersreceiveinformationfromGooglethatcouldidentifythedatasubject.
Theconversioncookiestorespersonalinformation,e.
g.
theInternetpagesvisitedbythedatasub-ject.
EachtimewevisitourInternetpages,personaldata,includingtheIPaddressoftheInternetaccessusedbythedatasubject,istransmittedtoGoogleintheUnitedStatesofAmerica.
ThesepersonaldataarestoredbyGoogleintheUnitedStatesofAmerica.
Googlemaypassthesepersonaldatacollectedthroughthetechnicalproceduretothirdparties.
Thedatasubjectmay,atanytime,preventthesettingofcookiesbyourwebsite,asstatedabove,bymeansofacorrespondingsettingoftheInternetbrowserusedandthuspermanentlydenytheset-tingofcookies.
SuchasettingoftheInternetbrowserusedwouldalsopreventGooglefromplacingaconversioncookieontheinformationtechnologysystemofthedatasubject.
Inaddition,acookiesetbyGoogleAdWordsmaybedeletedatanytimeviatheInternetbrowserorothersoftwarepro-grams.
ThedatasubjecthasapossibilityofobjectingtotheinterestbasedadvertisementofGoogle.
There-fore,thedatasubjectmustaccessfromeachofthebrowsersinusethelinkwww.
google.
de/set-tings/adsandsetthedesiredsettings.
FurtherinformationandtheapplicabledataprotectionprovisionsofGooglemayberetrievedunderhttps://www.
google.
com/intl/en/policies/privacy/.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage22of2820.
DataprotectionprovisionsabouttheapplicationanduseofInstagramOnthiswebsite,thecontrollerhasintegratedcomponentsoftheserviceInstagram.
Instagramisaservicethatmaybequalifiedasanaudiovisualplatform,whichallowsuserstosharephotosandvideos,aswellasdisseminatesuchdatainothersocialnetworks.
TheoperatingcompanyoftheservicesofferedbyInstagramisInstagramLLC,1HackerWay,Building14FirstFloor,MenloPark,CA,UNITEDSTATES.
Witheachcall-uptooneoftheindividualpagesofthisInternetsite,whichisoperatedbythecon-trollerandonwhichanInstagramcomponent(Instabutton)wasintegrated,theInternetbrowserontheinformationtechnologysystemofthedatasubjectisautomaticallypromptedtothedownloadofadisplayofthecorrespondingInstagramcomponentofInstagram.
Duringthecourseofthistech-nicalprocedure,Instagrambecomesawareofwhatspecificsub-pageofourwebsitewasvisitedbythedatasubject.
IfthedatasubjectisloggedinatthesametimeonInstagram,Instagramdetectswitheverycall-uptoourwebsitebythedatasubject—andfortheentiredurationoftheirstayonourInternetsite—whichspecificsub-pageofourInternetpagewasvisitedbythedatasubject.
Thisinformationiscol-lectedthroughtheInstagramcomponentandisassociatedwiththerespectiveInstagramaccountofthedatasubject.
IfthedatasubjectclicksononeoftheInstagrambuttonsintegratedonourwebsite,thenInstagrammatchesthisinformationwiththepersonalInstagramuseraccountofthedatasub-jectandstoresthepersonaldata.
InstagramreceivesinformationviatheInstagramcomponentthatthedatasubjecthasvisitedourwebsiteprovidedthatthedatasubjectisloggedinatInstagramatthetimeofthecalltoourwebsite.
ThisoccursregardlessofwhetherthepersonclicksontheInstagrambuttonornot.
Ifsuchatrans-missionofinformationtoInstagramisnotdesirableforthedatasubject,thenheorshecanpreventthisbyloggingofffromtheirInstagramaccountbeforeacall-uptoourwebsiteismade.
FurtherinformationandtheapplicabledataprotectionprovisionsofInstagrammayberetrievedunderhttps://help.
instagram.
com/155833707900388andhttps://www.
instagram.
com/about/le-gal/privacy/.
21.
DataprotectionprovisionsabouttheapplicationanduseofLinkedInThecontrollerhasintegratedcomponentsoftheLinkedInCorporationonthiswebsite.
LinkedInisaweb-basedsocialnetworkthatenablesuserswithexistingbusinesscontactstoconnectandtomakenewbusinesscontacts.
Over400millionregisteredpeopleinmorethan200countriesuseLinkedIn.
Thus,LinkedIniscurrentlythelargestplatformforbusinesscontactsandoneofthemostvisitedwebsitesintheworld.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage23of28TheoperatingcompanyofLinkedInisLinkedInCorporation,2029StierlinCourtMountainView,CA94043,UNITEDSTATES.
ForprivacymattersoutsideoftheUNITEDSTATESLinkedInIreland,PrivacyPolicyIssues,WiltonPlaza,WiltonPlace,Dublin2,Ireland,isresponsible.
Witheachcall-uptooneoftheindividualpagesofthisInternetsite,whichisoperatedbythecon-trollerandonwhichaLinkedIncomponent(LinkedInplug-in)wasintegrated,theInternetbrowserontheinformationtechnologysystemofthedatasubjectisautomaticallypromptedtothedownloadofadisplayofthecorrespondingLinkedIncomponentofLinkedIn.
FurtherinformationabouttheLinkedInplug-inmaybeaccessedunderhttps://developer.
linkedin.
com/plugins.
Duringthecourseofthistechnicalprocedure,LinkedIngainsknowledgeofwhatspecificsub-pageofourwebsitewasvisitedbythedatasubject.
IfthedatasubjectisloggedinatthesametimeonLinkedIn,LinkedIndetectswitheverycall-uptoourwebsitebythedatasubject—andfortheentiredurationoftheirstayonourInternetsite—whichspecificsub-pageofourInternetpagewasvisitedbythedatasubject.
ThisinformationiscollectedthroughtheLinkedIncomponentandassociatedwiththerespectiveLinkedInaccountofthedatasubject.
IfthedatasubjectclicksononeoftheLinkedInbuttonsintegratedonourwebsite,thenLinkedInassignsthisinformationtothepersonalLinkedInuseraccountofthedatasubjectandstoresthepersonaldata.
LinkedInreceivesinformationviatheLinkedIncomponentthatthedatasubjecthasvisitedourweb-site,providedthatthedatasubjectisloggedinatLinkedInatthetimeofthecall-uptoourwebsite.
ThisoccursregardlessofwhetherthepersonclicksontheLinkedInbuttonornot.
Ifsuchatransmis-sionofinformationtoLinkedInisnotdesirableforthedatasubject,thenheorshemaypreventthisbyloggingofffromtheirLinkedInaccountbeforeacall-uptoourwebsiteismade.
LinkedInprovidesunderhttps://www.
linkedin.
com/psettings/guest-controlsthepossibilitytoun-subscribefrome-mailmessages,SMSmessagesandtargetedads,aswellastheabilitytomanageadsettings.
LinkedInalsousesaffiliatessuchasEire,GoogleAnalytics,BlueKai,DoubleClick,Nielsen,Comscore,Eloqua,andLotame.
Thesettingofsuchcookiesmaybedeniedunderhttps://www.
linkedin.
com/legal/cookie-policy.
TheapplicableprivacypolicyforLinkedInisavailableunderhttps://www.
linkedin.
com/legal/privacy-policy.
TheLinkedInCookiePolicyisavailableunderhttps://www.
linkedin.
com/legal/cookie-policy.
22.
DataprotectionprovisionsabouttheapplicationanduseofTwitterOnthiswebsite,thecontrollerhasintegratedcomponentsofTwitter.
Twitterisamultilingual,pub-licly-accessiblemicrobloggingserviceonwhichusersmaypublishandspreadso-called'tweets,'e.
g.
shortmessages,whicharelimitedto140characters.
Theseshortmessagesareavailableforevery-one,includingthosewhoarenotloggedontoTwitter.
Thetweetsarealsodisplayedtoso-calledfollowersoftherespectiveuser.
FollowersareotherTwitteruserswhofollowauser'stweets.
Fur-thermore,Twitterallowsyoutoaddressawideaudienceviahashtags,linksorretweets.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage24of28TheoperatingcompanyofTwitterisTwitter,Inc.
,1355MarketStreet,Suite900,SanFrancisco,CA94103,UNITEDSTATES.
Witheachcall-uptooneoftheindividualpagesofthisInternetsite,whichisoperatedbythecon-trollerandonwhichaTwittercomponent(Twitterbutton)wasintegrated,theInternetbrowserontheinformationtechnologysystemofthedatasubjectisautomaticallypromptedtodownloadadis-playofthecorrespondingTwittercomponentofTwitter.
FurtherinformationabouttheTwitterbut-tonsisavailableunderhttps://about.
twitter.
com/de/resources/buttons.
Duringthecourseofthistechnicalprocedure,Twittergainsknowledgeofwhatspecificsub-pageofourwebsitewasvisitedbythedatasubject.
ThepurposeoftheintegrationoftheTwittercomponentisaretransmissionofthecontentsofthiswebsitetoallowouruserstointroducethiswebpagetothedigitalworldandincreaseourvisitornumbers.
IfthedatasubjectisloggedinatthesametimeonTwitter,Twitterdetectswitheverycall-uptoourwebsitebythedatasubjectandfortheentiredurationoftheirstayonourInternetsitewhichspecificsub-pageofourInternetpagewasvisitedbythedatasubject.
ThisinformationiscollectedthroughtheTwittercomponentandassociatedwiththerespectiveTwitteraccountofthedatasubject.
IfthedatasubjectclicksononeoftheTwitterbuttonsintegratedonourwebsite,thenTwitterassignsthisinformationtothepersonalTwitteruseraccountofthedatasubjectandstoresthepersonaldata.
TwitterreceivesinformationviatheTwittercomponentthatthedatasubjecthasvisitedourwebsite,providedthatthedatasubjectisloggedinonTwitteratthetimeofthecall-uptoourwebsite.
ThisoccursregardlessofwhetherthepersonclicksontheTwittercomponentornot.
Ifsuchatransmis-sionofinformationtoTwitterisnotdesirableforthedatasubject,thenheorshemaypreventthisbyloggingofffromtheirTwitteraccountbeforeacall-uptoourwebsiteismade.
TheapplicabledataprotectionprovisionsofTwittermaybeaccessedunderhttps://twitter.
com/privacylang=en.
23.
DataprotectionprovisionsabouttheapplicationanduseofXingOnthiswebsite,thecontrollerhasintegratedcomponentsofXING.
XINGisanInternet-basedsocialnetworkthatenablesuserstoconnectwithexistingbusinesscontactsandtocreatenewbusinesscontacts.
TheindividualuserscancreateapersonalprofileofthemselvesatXING.
Companiesmay,e.
g.
createcompanyprofilesorpublishjobsonXING.
TheoperatingcompanyofXINGisXINGSE,Dammtorstrae30,20354Hamburg,Germany.
Witheachcall-uptooneoftheindividualpagesofthisInternetsite,whichisoperatedbythecon-trollerandonwhichaXINGcomponent(XINGplug-in)wasintegrated,theInternetbrowserontheinformationtechnologysystemofthedatasubjectisautomaticallypromptedtodownloadadisplayofthecorrespondingXINGcomponentofXING.
FurtherinformationabouttheXINGplug-inthemaybeaccessedunderhttps://dev.
xing.
com/plugins.
Duringthecourseofthistechnicalprocedure,XINGgainsknowledgeofwhatspecificsub-pageofourwebsitewasvisitedbythedatasubject.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage25of28IfthedatasubjectisloggedinatthesametimeonXING,XINGdetectswitheverycall-uptoourwebsitebythedatasubject—andfortheentiredurationoftheirstayonourInternetsite—whichspecificsub-pageofourInternetpagewasvisitedbythedatasubject.
ThisinformationiscollectedthroughtheXINGcomponentandassociatedwiththerespectiveXINGaccountofthedatasubject.
IfthedatasubjectclicksontheXINGbuttonintegratedonourInternetsite,e.
g.
the"Share"-button,thenXINGassignsthisinformationtothepersonalXINGuseraccountofthedatasubjectandstoresthepersonaldata.
XINGreceivesinformationviatheXINGcomponentthatthedatasubjecthasvisitedourwebsite,providedthatthedatasubjectisloggedinatXINGatthetimeofthecalltoourwebsite.
ThisoccursregardlessofwhetherthepersonclicksontheXINGcomponentornot.
IfsuchatransmissionofinformationtoXINGisnotdesirableforthedatasubject,thenheorshecanpreventthisbyloggingofffromtheirXINGaccountbeforeacall-uptoourwebsiteismade.
ThedataprotectionprovisionspublishedbyXING,whichisavailableunderhttps://www.
xing.
com/privacy,provideinformationonthecollection,processinganduseofper-sonaldatabyXING.
Inaddition,XINGhaspublishedprivacynoticesfortheXINGsharebuttonunderhttps://www.
xing.
com/app/shareop=data_protection.
24.
DataprotectionprovisionsabouttheapplicationanduseofYouTubeOnthiswebsite,thecontrollerhasintegratedcomponentsofYouTube.
YouTubeisanInternetvideoportalthatenablesvideopublisherstosetvideoclipsandotherusersfreeofcharge,whichalsoprovidesfreeviewing,reviewandcommentingonthem.
YouTubeallowsyoutopublishallkindsofvideos,soyoucanaccessbothfullmoviesandTVbroadcasts,aswellasmusicvideos,trailers,andvideosmadebyusersviatheInternetportal.
TheoperatingcompanyofYouTubeisYouTube,LLC,901CherryAve.
,SanBruno,CA94066,UNITEDSTATES.
TheYouTube,LLCisasubsidiaryofGoogleInc.
,1600AmphitheatrePkwy,MountainView,CA94043-1351,UNITEDSTATES.
Witheachcall-uptooneoftheindividualpagesofthisInternetsite,whichisoperatedbythecon-trollerandonwhichaYouTubecomponent(YouTubevideo)wasintegrated,theInternetbrowserontheinformationtechnologysystemofthedatasubjectisautomaticallypromptedtodownloadadisplayofthecorrespondingYouTubecomponent.
FurtherinformationaboutYouTubemaybeob-tainedunderhttps://www.
youtube.
com/intl/de/yt/about/.
Duringthecourseofthistechnicalpro-cedure,YouTubeandGooglegainknowledgeofwhatspecificsub-pageofourwebsitewasvisitedbythedatasubject.
IfthedatasubjectisloggedinonYouTube,YouTuberecognizeswitheachcall-uptoasub-pagethatcontainsaYouTubevideo,whichspecificsub-pageofourInternetsitewasvisitedbythedatasubject.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage26of28ThisinformationiscollectedbyYouTubeandGoogleandassignedtotherespectiveYouTubeaccountofthedatasubject.
YouTubeandGooglewillreceiveinformationthroughtheYouTubecomponentthatthedatasubjecthasvisitedourwebsite,ifthedatasubjectatthetimeofthecalltoourwebsiteisloggedinonYouTube;thisoccursregardlessofwhetherthepersonclicksonaYouTubevideoornot.
IfsuchatransmissionofthisinformationtoYouTubeandGoogleisnotdesirableforthedatasubject,thedeliverymaybepreventedifthedatasubjectlogsofffromtheirownYouTubeaccountbeforeacall-uptoourwebsiteismade.
YouTube'sdataprotectionprovisions,availableathttps://www.
google.
com/intl/en/policies/pri-vacy/,provideinformationaboutthecollection,processinganduseofpersonaldatabyYouTubeandGoogle.
25.
DataprotectionprovisionsabouttheapplicationanduseofMouseflowThiswebsiteusesMouseflow,ananalyticstoolbyMouseflow,ApS(Flaesketorvet68,1711Copen-hagenV,Denmark),totrackuseractivity,pagecontent,click,touch,movement,scroll,and(insomecases).
keystrokeactivity.
IfyouarelocatedinEurope,yourIPaddress,keystrokeactivity,andper-sonalinformationareneverstoredorsharedwithanythird-parties.
WeprocessandkeepalldataforourownwebsitewithinEuropeand,ifyouwishtoopt-outfromtrackingbyMouseflow,youcandosohere:https://mouseflow.
com/opt-out/26.
PaymentMethod:DataprotectionprovisionsabouttheuseofPayPalasapaymentprocessorOnthiswebsite,thecontrollerhasintegratedcomponentsofPayPal.
PayPalisanonlinepaymentserviceprovider.
Paymentsareprocessedviaso-calledPayPalaccounts,whichrepresentvirtualpri-vateorbusinessaccounts.
PayPalisalsoabletoprocessvirtualpaymentsthroughcreditcardswhenauserdoesnothaveaPayPalaccount.
APayPalaccountismanagedviaane-mailaddress,whichiswhytherearenoclassicaccountnumbers.
PayPalmakesitpossibletotriggeronlinepaymentstothirdpartiesortoreceivepayments.
PayPalalsoacceptstrusteefunctionsandoffersbuyerprotec-tionservices.
TheEuropeanoperatingcompanyofPayPalisPayPal(Europe)S.
à.
r.
l.
&Cie.
S.
C.
A.
,22-24BoulevardRoyal,2449Luxembourg,Luxembourg.
Ifthedatasubjectchooses"PayPal"asthepaymentoptionintheonlineshopduringtheorderingprocess,weautomaticallytransmitthedataofthedatasubjecttoPayPal.
Byselectingthispaymentoption,thedatasubjectagreestothetransferofpersonaldatarequiredforpaymentprocessing.
ThepersonaldatatransmittedtoPayPalisusuallyfirstname,lastname,address,emailaddress,IPaddress,telephonenumber,mobilephonenumber,orotherdatanecessaryforpaymentprocessing.
Theprocessingofthepurchasecontractalsorequiressuchpersonaldata,whichareinconnectionwiththerespectiveorder.
Thetransmissionofthedataisaimedatpaymentprocessingandfraudprevention.
ThecontrollerwilltransferpersonaldatatoPayPal,inparticular,ifalegitimateinterestinthetransmissionisgiven.
ThepersonaldataexchangedbetweenPayPalandthecontrollerfortheprocessingofthedatawillPRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage27of28betransmittedbyPayPaltoeconomiccreditagencies.
Thistransmissionisintendedforidentityandcreditworthinesschecks.
PayPalwill,ifnecessary,passonpersonaldatatoaffiliatesandserviceprovidersorsubcontractorstotheextentthatthisisnecessarytofulfillcontractualobligationsorfordatatobeprocessedintheorder.
ThedatasubjecthasthepossibilitytorevokeconsentforthehandlingofpersonaldataatanytimefromPayPal.
Arevocationshallnothaveanyeffectonpersonaldatawhichmustbeprocessed,usedortransmittedinaccordancewith(contractual)paymentprocessing.
TheapplicabledataprotectionprovisionsofPayPalmayberetrievedunderhttps://www.
pay-pal.
com/us/webapps/mpp/ua/privacy-full.
27.
LegalbasisfortheprocessingArt.
6(1)lit.
aGDPRservesasthelegalbasisforprocessingoperationsforwhichweobtainconsentforaspecificprocessingpurpose.
Iftheprocessingofpersonaldataisnecessaryfortheperformanceofacontracttowhichthedatasubjectisparty,asisthecase,forexample,whenprocessingopera-tionsarenecessaryforthesupplyofgoodsortoprovideanyotherservice,theprocessingisbasedonArticle6(1)lit.
bGDPR.
Thesameappliestosuchprocessingoperationswhicharenecessaryforcarryingoutpre-contractualmeasures,forexampleinthecaseofinquiriesconcerningourproductsorservices.
Isourcompanysubjecttoalegalobligationbywhichprocessingofpersonaldataisre-quired,suchasforthefulfillmentoftaxobligations,theprocessingisbasedonArt.
6(1)lit.
cGDPR.
Inrarecases,theprocessingofpersonaldatamaybenecessarytoprotectthevitalinterestsofthedatasubjectorofanothernaturalperson.
Thiswouldbethecase,forexample,ifavisitorwerein-juredinourcompanyandhisname,age,healthinsurancedataorothervitalinformationwouldhavetobepassedontoadoctor,hospitalorotherthirdparty.
ThentheprocessingwouldbebasedonArt.
6(1)lit.
dGDPR.
Finally,processingoperationscouldbebasedonArticle6(1)lit.
fGDPR.
Thislegalbasisisusedforprocessingoperationswhicharenotcoveredbyanyoftheabovementionedlegalgrounds,ifprocessingisnecessaryforthepurposesofthelegitimateinterestspursuedbyourcompanyorbyathirdparty,exceptwheresuchinterestsareoverriddenbytheinterestsorfunda-mentalrightsandfreedomsofthedatasubjectwhichrequireprotectionofpersonaldata.
Suchpro-cessingoperationsareparticularlypermissiblebecausetheyhavebeenspecificallymentionedbytheEuropeanlegislator.
Heconsideredthatalegitimateinterestcouldbeassumedifthedatasubjectisaclientofthecontroller(Recital47Sentence2GDPR).
28.
ThelegitimateinterestspursuedbythecontrollerorbyathirdpartyWheretheprocessingofpersonaldataisbasedonArticle6(1)lit.
fGDPRourlegitimateinterestistocarryoutourbusinessinfavorofthewell-beingofallouremployeesandtheshareholders.
29.
PeriodforwhichthepersonaldatawillbestoredThecriteriausedtodeterminetheperiodofstorageofpersonaldataistherespectivestatutoryre-tentionperiod.
Afterexpirationofthatperiod,thecorrespondingdataisroutinelydeleted,aslongasitisnolongernecessaryforthefulfillmentofthecontractortheinitiationofacontract.
PRIVACY-POLICY-DSGVO-BRUGG-GROUP-10-04-2018-ENPage28of2830.
Provisionofpersonaldataasstatutoryorcontractualrequirement;Requirementnecessarytoenterintoacontract;Obligationofthedatasubjecttoprovidetheper-sonaldata;possibleconsequencesoffailuretoprovidesuchdataWeclarifythattheprovisionofpersonaldataispartlyrequiredbylaw(e.
g.
taxregulations)orcanalsoresultfromcontractualprovisions(e.
g.
informationonthecontractualpartner).
Sometimesitmaybenecessarytoconcludeacontractthatthedatasubjectprovidesuswithpersonaldata,whichmustsubsequentlybeprocessedbyus.
Thedatasubjectis,forexample,obligedtoprovideuswithpersonaldatawhenourcompanysignsacontractwithhimorher.
Thenon-provisionofthepersonaldatawouldhavetheconsequencethatthecontractwiththedatasubjectcouldnotbeconcluded.
Beforepersonaldataisprovidedbythedatasubject,thedatasubjectmustcontactanyemployee.
Theemployeeclarifiestothedatasubjectwhethertheprovisionofthepersonaldataisrequiredbylaworcontractorisnecessaryfortheconclusionofthecontract,whetherthereisanobligationtoprovidethepersonaldataandtheconsequencesofnon-provisionofthepersonaldata.
31.
Existenceofautomateddecision-makingAsaresponsiblecompany,wedonotuseautomaticdecision-makingorprofiling.
ThisprivacypolicyappliestoBRUGGGROUPAGanditssubsidiaries.
Version1.
3–January2020ThisPrivacyPolicyhasbeengeneratedbythePrivacyPolicyGeneratoroftheDGD-YourExternalDPOthatwasdevelopedincooperationwithRCGmbH,whichsellsusedcomputersandtheGermanLawyersfromWBS-LAW.
ThisPrivacyPolicyhasbeenslightlycustomizedtoservetheclaimsoftheBRUGGGroupanditssubsidiaries.