Privacy policy

The person responsible within the meaning of the Basic Data Protection Ordinance (GDPR) and other national data protection laws of the member states as well as other data protection regulations:

For the operation and use of the Böllhoff website

at https://www.boellhoff.com/at-en

Böllhoff GmbH
Johann Roithner-Straße 131
4050 Traun
Austria
Tel.: +43 7229 69169
E-mail: linz@boellhoff.com
Imprint

Böllhoff GmbH is also responsible if you contact this company, conclude contracts with it or for any other communication between you and this company.

For the operation and use of the Böllhoff online eShop

at https://eshop.boellhoff.at/en

Böllhoff GmbH

Johann Roithner-Straße 131
4050 Traun
Austria
Tel.: +43 7229 69169
E-mail: linz@boellhoff.com
Imprint

Böllhoff GmbH is also responsible if you contact this company, conclude contracts with it or for any other communication between you and this company.

You can contact the data protection coordinator of the person responsible at:

Böllhoff GmbH

Kerstin Kitzmüller
Phone: +43 7229 69169
Email: linz@boellhoff.com

Scope of the processing of personal data

We process personal data of our users and customers only to the extent necessary to achieve the purpose pursued with the data processing.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1 S.1. lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 f GDPR serves as the legal basis for processing.

Data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject.

Category of persons concerned

The persons concerned by the data processing are categorized in:
Natural persons as customers, interested parties and other visitors, summarized as "users or customers".

Passing on of data

A passing on of data to third parties does not take place in principle. If it takes place, then on a statutory basis, for example pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you when data is passed on to transport companies for the purpose of delivering the goods ordered by the Customer. A disclosure to third parties may also take place if there is a legal obligation to do so, pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, if you have given your consent, Art. 6 para. 1 sentence 1 lit a GDPR or the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the person concerned, which require the protection of personal data, prevail.

Description and scope of data processing

Every time you visit our website https://www.boellhoff.com/at-en and https://eshop.boellhoff.at/en, the browser used on your device automatically sends information and data to the server of our website. This information and data is temporarily stored in a so-called log file.
If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.
If you wish to view our website, our system collects the following information and data from the computer system of the calling computer without your intervention and stores it until it is automatically deleted:

• Information about the browser type and version used
• The user's operating system
• The Internet service provider of the user
• The IP address of the user
• Date and time of the request
• Websites from which the user's system reaches our website
• Websites accessed by the user's system via our website
• Name and URL of the file retrieved
• Amount of data transmitted in each case
• Time zone difference to Greenwich Mean Time (GMT)
• Access status/HTTP status code

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 Par. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purposes listed under point 3. Since we do not use the data mentioned in paragraph 1. in any case to draw conclusions about your person, our interests outweigh.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure that the website functions properly and to ensure a smooth connection to the website. In addition, the data serves us to optimize the website, to guarantee comfortable use of our website and to ensure the security of our information technology systems in terms of system security and stability. An evaluation of the data for marketing purposes does not take place in this context.

In these purposes also lies our legitimate interest in data processing according to Art. 6 Para. 1 S.1 lit. f GDPR (see No. 2.).

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. If the data is stored in log files, this is the case after seven days at the latest.

Possibility of opposition and elimination

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

External service providers

We use an external webhosting service provider to process your data. This is carefully selected and commissioned by us and is bound by our instructions and is regularly checked by us. Technical and organisational measures have been taken to ensure the security of your data. It is based in the Federal Republic of Germany.

Content Delivery Network

For the distribution of our online offer - especially large media files - we use a so-called Content Delivery Network (CDN). Our CDN is a network of regionally distributed servers of our technical service providers (order processors) connected via the Internet. When the online offer is called up, the Internet browser or the programme with which the offer is called up automatically transmits information to these service providers, which is collected in corresponding log files, the so-called server log files, and processed on servers within the European Union. The server log files are anonymised on these servers and then transmitted to the USA without any personal reference. The server log files are stored there for 90 days and then automatically deleted. The server log files include, in particular, details of the browser and operating system used, an indication of the origin of the previously visited pages (so-called referral URL), the IP address of the device used, the name of the Internet provider, as well as the date and time of all page views under the offer, including the amount of data transmitted. In addition, in order to optimise the video quality and ensure the accessibility of the videos, technical, non-personal data in the form of video start time, technically caused interruptions and loading times, received quality and network information are collected at evaluation servers.tagesschau.de generally also collects measurement data about the offer in order to determine metrics such as loading times, transmission speed, file sizes etc. (monitoring). This enables the functionality of the service on the respective end device to be checked and improved. This data is processed by the technical service provider on servers within the European Union and then transmitted anonymously and without personal reference to the USA for evaluation. After the legal storage periods have expired, the anonymised measurement data is automatically deleted.

Description and scope of data processing

Our website atwww.boellhoff.com/de and the Böllhoff eShop at https://eshop.boellhoff.de use cookies. Cookies are text files that are stored by the web browser on the user’s computer system (terminal equipment) when they visit the Böllhoff website and provide certain information to the entity that placed the cookie, such as browser data, IP address, user data and interaction data. The use of cookies means that information is stored the end user’s (i.e. the customer’s) terminal equipment or that information already stored on the end user’s terminal equipment is accessed.

Böllhoff divides cookies into three categories:

• Technically strictly necessary cookies
  Our website uses cookies that are technically strictly necessary in order to display and use the website. Some elements of our website require that the calling browser can be identified even after a page break. These are cookies that are technically strictly necessary to operate and use the website, such as login information, adding goods to the shopping basket or executing the applications you expect. It is not possible to access certain services on our website without these technically strictly necessary cookies. You cannot reject technically strictly necessary cookies using the consent management tool (Cookie Banner).
• Functional cookies
  We use cookies to improve the functionality of our website and make our website more user-friendly. They make it possible, for example, to save filters and setting configured by users. This makes it easier for you to use the website on your next visit.
• Marketing and analytics cookies
  We also use cookies to collect information about how users use and interact with our website (usage analyses) in order to facilitate statistical recording on the use of our website, for marketing purposes and for personalised advertising.

Legal basis for data processing

The legal basis for the use of technically strictly necessary cookies and processing of the associated personal data is Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Article 6(1)(f) GDPR. Our legitimate interest follows from the purpose of data processing and use of cookies set out in Sections 1 and 3 and the provision of a website on the Internet as a digital service.

The legal basis for the use of all technically not strictly necessary cookies and associated data processing is the user’s consent in accordance with Section 25(1) Sentence 1 of the German Telecommunications Digital Services Data Protection Act TDDDG and Article 6(1)(a) GDPR.

Purpose of data processing

The purpose of using technically not strictly necessary cookies is to ensure the operability of the Böllhoff digital service provided through the website.

The purpose of using all other cookies is to facilitate convenient, time-saving use of our website for users, evaluate the use of our website and how users interact with it, and optimise our digital service and Böllhoff marketing activities in order to tailor our website to the interests of our customers and website users.

Right to withdraw and delete data

The user may withdraw their consent to the use of cookies at any time. Withdrawal shall not affect the lawfulness of cookie use prior to such withdrawal (i.e. withdrawal shall have no retroactive effect).

You can withdraw your consent to the use of cookies at any time by sending a message to

Wilhelm Böllhoff GmbH & Co KG
Archimedesstr. 1–4
D-33649 Bielefeld

Tel. + 49 (0) 521 4482-01
Fax +49 (0) 521 4493-64

Email info@boellhoff.com

if you have accessed the websitewww.boellhoff.com/de .

You can withdraw your consent to the use of cookies at any time by sending a message to

Böllhoff GmbH
Archimedesstr. 1–4
D-33649 Bielefeld
Germany
Tel.+49 521 4482 1319
Email: eshop@boellhoff.com

if you have accessed the websitehttps://eshop.boellhoff.de

Alternatively, you can contact the data protection offer specified in this Privacy Policy.

You can also use the consent management tool, which you can access via the following link.

You can also use the tool the manage your cookie settings at any time.

You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Cookies that have already been saved can be deleted at any time. If you deactivate cookies for our website, you may not be able to use all of our website’s functions to their full extent.

Please note that any browser settings you configure only apply for that specific browser on that specific end device. If you change browser or end device, you will have to configure the browser settings and cookie settings again.

Description and scope of data processing

You can subscribe to a free newsletter on our website. The advertised goods and services are mentioned in the declaration of consent. When registering for the newsletter, the data from the input mask is transmitted to us.

The only mandatory information for sending the newsletter is your e-mail address. The indication of further, separately marked data (first name, surname) is voluntary and is used to be able to address you personally.

In addition, the following data is collected and stored during registration:

• IP address of the calling computer
• Date and time of the declaration of consent (registration)
• Content of the declaration of consent

Your consent will be obtained for the processing of your data during the registration process.

For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after 7 days.

For the purpose of proof of your registration, the following additional data will be collected and stored in the double-opt-in procedure:

• Date and time of confirmation
• Contents of the confirmation mail
• IP address of the calling computer

In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.

Legal basis for data processing

The newsletter is sent after the user has registered on our website. In doing so, the user gives his consent, which can be revoked at any time, to the sending of the newsletter. No newsletter will be sent without your consent.
The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 Par. 1 S.1 lit. a GDPR.
The legal basis for the storage of the registration and confirmation data mentioned under item 1. is Art. 6 Para. 1 S.1 lit. f GDPR for protection against civil and competition law claims, in order to be able to provide proof of the user's consent.

Purpose of data processing

The collection of the user's e-mail address serves to send the newsletter.

The collection of other personal data within the registration process serves to prevent misuse of the services or the e-mail address used as well as to be able to clarify a possible misuse of your personal data and to be able to prove your consent. This is at the same time our legitimate interest according to clause 2.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

Possibility of revocation

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the cancellation link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint (included in every newsletter e-mail). The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation).

Description and scope of data processing

Wilhelm Böllhoff GmbH & Co. KG, Böllhoff GmbH and Böllhoff Verbindungstechnik GmbH would like to send their customers or users regular information, newsletters, trade fair invitations, feedback requests, training opportunities, offers and advertising about fasteners and assembly technology as well as related technical and logistical services and products of the Böllhoff Group (in detail at www.boellhoff.com) by e-mail:

For this the respective company requires the prior consent of the customer or the user to the sending of these advertising e-mails and to the storage of the date (e-mail address) required for the sending.

In case of the consent of the customer or the user, his e-mail address will be processed in order to be able to send him the advertising. The provision of further data, such as first names and surnames, is voluntary and is used in order to address the customer or the user personally.

The customer and the user are informed that they are neither contractually nor legally obliged to give their consent for the sending of information, newsletters, trade fair invitations, feedback requests, training opportunities, offers and advertising about products and services of the respective Böllhoff company and the Böllhoff Group, but that this is solely on a voluntary basis, without the refusal of consent having any legal disadvantage or other disadvantage for the customer or the user.

In addition to the e-mail address, the following data is also collected and stored when the consent is obtained:

• IP address of the calling computer
• Date and time of the declaration of consent (registration)
• Content of the declaration of consent

The so-called double opt-in procedure is used to obtain consent. This means that after the customer has given his consent, we will send an e-mail to the e-mail address provided asking him to confirm that he agrees to the sending of advertising e-mails. If confirmation is not received within 24 hours, the information will be blocked and automatically deleted after 7 days.

For the purpose of proof of consent, the following additional data is collected and stored in the double-opt-in procedure:

• Date and time of confirmation
• Contents of the confirmation mail
• IP address of the calling computer

The data will not be passed on to third parties in connection with data processing for sending advertising e-mails. The data will be used exclusively for sending advertising e-mails.

Legal basis for data processing

The legal basis for the storage of the e-mail address and, if applicable, first names and surnames, is the consent to the sending of advertising e-mails by the user or customer, which may be revoked at any time. No advertising e-mails will be sent without your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
Furthermore, the legal basis for the storage of the consent and confirmation data mentioned under No.  1. is Art. 6 Para. 1 S.1 lit f GDPR for protection against civil and competition law claims, in order to be able to provide proof of the user's and the customer's consent.

Purpose of data processing

The collection of the user's e-mail address serves to send the advertising mail.

The collection of other personal data as part of the consent process serves to prevent misuse of the services or the e-mail address used as well as to clarify a possible misuse of your personal data and to be able to prove the consent given by the user or customer. This is at the same time our legitimate interest according to clause 2.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The e-mail address and, if applicable, first name and surname of the user will therefore be stored as long as the consent is not revoked. After the revocation, which is possible at any time, the data will be deleted immediately.

Possibility of revocation

The consenting party has the right to revoke his consent at any time. The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation).
The cancellation can be declared by clicking on the cancellation link provided in each advertising e-mail or by sending a message to the contact details given in the imprint (included in each advertising e-mail).

at https://eshop.boellhoff.at/en

Description and scope of data processing

In order to be able to order goods in the Böllhoff eShop, a previous registration by you is necessary. Registration is also used for access control.
A guest order is not possible.
Mandatory information is provided upon registration. Your sales tax identification number will also be requested, as the Böllhoff eShop is only aimed at entrepreneurs and merchants.

Subsequent data will be processed during registration:

• E-mail address
• First and last name
• Company
• Street and house number
• Postcode and city
• Country
• Sales tax identification number
• The password you have chosen
• Login data (combination of e-mail address and password)
• In the case of voluntary declaration:
• Phone number
• Fax number

The input is voluntary, without complete input of the mandatory data the registration and activation of the customer account can not take place.
We need the mandatory data in order to process your order.
The indication of your telephone number, fax number is voluntary. It serves a fast establishment of contact with questions in connection with the completion of your order. Your e-mail address is also your username.

The following data is also stored at the time of registration and at each subsequent login:

• The IP address of the user
• Date and time of the act of use
• Login data

When ordering goods in the Böllhoff eshop, we process your inventory data (name, address, VAT ID) as well as contact data (e-mail address, contact person) and your contract data (type and quantity of ordered goods, payment information) as well as content data when you send us information about your order.

Legal basis for data processing

The legal basis for processing your customer data to fulfil the contract concluded via the Böllhoff eShop is Art. 6 Para. 1 S.1 lit. b GDPR.

Legal basis for the registration and the exclusion of a guest order possibility is Art. 6 Abs. 1 S.1 lit. f GDPR.
The registration of the customer serves to ensure that only entrepreneurs or merchants and no consumers can order goods in the Böllhoff eShop. The Böllhoff eShop is a B2B shop that does not sell to consumers. Access control takes place in order to exclude orders from consumers to whom the Böllhoff eShop does not address.
The registration enables the prior verification of the specified VAT identification number and only after a positive verification is the customer account activated.
Since the data provided during registration is also required in the context of an order for contract processing, with the exception of the sales tax identification number, no higher-value interests of the customer worthy of protection are apparent that speak against prior registration. In addition, the customer has the option of deleting the customer account created during registration at any time. The registration by the customer is voluntary, so that a higher-quality interest worthy of protection of the customer voluntarily submitting his data is not evident.
This data is also stored to protect against misuse of our online service.

Purpose of data processing

The purpose of data processing is on the one hand to ensure access control to the Böllhoff eShop and on the other hand to contractually process the customer's orders.

Duration of storage, possibility of objection and elimination

Due to legal, in particular tax regulations, we are obliged to store your address, payment and order data for a period of ten years. However, we will limit the processing of your order data after 24 months (expiry of the warranty period + 1 month), i.e. your data will only be used to comply with legal obligations, unless you have given us your consent to permanently store your order data in your customer account.
The legal basis for the limited processing of your personal data is the fulfilment of statutory archiving and storage obligations under tax and commercial law, Art. 6 Para. 1 S.1 lit. c GDPR. According to this standard, processing to fulfil a legal obligation to which the person responsible is subject is permissible - this includes the tax law obligations to retain data. Processing is then limited to this limited purpose and, in accordance with the legal concept of Art. 18 GDPR and Art. 25 GDPR (data minimisation), this data is removed from the operational system and stored on another drive and access to the data is limited to a few persons who have received clear instructions as to when access is possible.
If you have registered, we store your registration data, also information about the method of payment, but not your order data (see above) until you finally delete your access. You can delete your customer account at any time. Furthermore, we store the voluntary data provided by you for the duration of your use of your account, unless you delete it beforehand. You can manage and change all information in the protected customer area.
If you still have legal storage obligations in the event of deletion or if the warranty period for the goods ordered by you has not yet expired, your data will initially be processed to a limited extent as soon as your customer account is deleted (see above).
After expiry of the legal storage period, your data will be permanently deleted.

Customer data will only be passed on to third parties in the following cases

Your personal data will not be passed on to third parties unless you have given us your prior consent. Excluded from this is the passing on to parcel services or forwarding agencies for order processing and delivery of the goods ordered by you. Only the data absolutely necessary for delivery will be transmitted.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

Scope of data processing

The person responsible processes your inventory data (name, address, sales tax identification number) as well as the relevant contact data (e.g. telephone or e-mail address or fax number and the contact person) and your contract data (type and quantity of ordered goods, payment information) as well as content data when you notify them of your order.

Purpose of data processing

The purpose of data processing is the contractual processing of orders and orders from customers.

Legal basis of data processing

The legal basis for the processing of your customer data for the fulfilment of a concluded contract and for the fulfilment of orders is Art. 6 Para. 1 S.1 lit. b GDPR.

Storage time

Due to legal, in particular tax regulations, the responsible person is obliged to store your address, payment and order data for a period of ten years. However, after 24 months (expiry of the warranty period + 1 month response time), the person responsible restricts the processing, i.e. your data will only be used to comply with legal obligations. The legal basis for the limited processing of your personal data is Art. 6 Para. 1 S.1 lit. c GDPR for the fulfilment of statutory archiving and storage obligations under tax and commercial law. According to this standard, processing to fulfil a legal obligation to which the person responsible is subject is permissible - this includes the tax law obligations to retain data. Processing is then limited to this limited purpose and in implementation of the legal concept of Art. 18 GDPR and Art. 25 GDPR (data minimisation) these data are removed from the operative system and stored on another drive and access to the data is limited to a few persons who have received clear instructions as to when access is possible.

After expiry of the legal storage period, your data will be permanently deleted.

Customer data will only be passed on to third parties in the following cases

Your personal data will not be passed on to third parties unless you have given us your prior consent. Excluded from this is the passing on to parcel services or forwarding agencies for order processing and delivery of the goods ordered by you. Only the data absolutely necessary for delivery will be transmitted.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

Description and scope of data processing

If you send us an inquiry (by contact form, by callback form, by return form) you declare your consent to the processing of the data you have entered and given.
When you contact us by e-mail or via the contact forms provided on the website, the data provided by you will be stored by us in order to answer your questions and process your request.
There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored.

At the time the message is sent via the contact form, the following data is also stored:

• The IP address of the user
• Date and time of dispatch

Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored.

In this context, the data will not be passed on to third parties. The data is used exclusively for the execution of the inquiry.

Legal basis for data processing

The legal basis for the processing of the data is Art. 6 Para. 1 S.1 lit. a GDPR if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 sentence 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 S.1 lit. b GDPR.

Purpose of data processing

The purpose of data processing is to process and answer your inquiry and your request.
The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is over when it can be inferred from the circumstances that the matter in question has been finally clarified, e.g. your inquiry has been answered and thus settled.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Possibility of revocation, objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation). If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. You can revoke your consent as well as your objection at any time by sending a message to

Böllhoff GmbH
Johann Roithner-Straße 131
4050 Traun
Austria
Tel.: +43 7229 69169
E-mail: linz@boellhoff.com

if you have used their contact form (at https://www.boellhoff.com/at-en) or have sent an e-mail to them.

You can revoke your consent as well as your objection at any time by sending a message to

Böllhoff GmbH
Johann Roithner-Straße 131
4050 Traun
Austria
Tel.: +43 7229 6916943
E-mail: linz@boellhoff.com

if you have used their contact form (at https://eshop.boellhof.at/en) or have sent an e-mail to them.

Description and scope of data processing

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which is affiliated with Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google”.

The service makes it possible to analyse user behaviour, perform conversion tracking, record statistical data and measure success. Google Analytics uses cookies, which are text files that are placed on your computer and facilitate analysis of how you use the website. The information generated by the cookie regarding your use of this website will usually be transferred to the USA by Google and stored there. However, if IP anonymisation is activated on this website, Google will truncate your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transfer. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google uses the information from Google Analytics on behalf of Böllhoff to evaluate your use of the website, compile reports about website activities and render further services to Böllhoff related to the use of the Böllhoff website and the Internet.

The following data may be transferred to Google:

• User’s IP address
• Information about the user’s browser, end device and screen resolution
• Date, time and duration of the visit to the website
• Geographic location
• Advertisements displayed and viewed
• Search terms entered by the user
• Session ID, session start time, cookie ID, user identifier
• Session data and interaction data
• Ad identifier
• Pages visited, user’s click path
• Referrer URL (web page from which the user reached the current web page)
• First visit to the website
• Bounce rate
• User behaviour (clicks, scrolls, duration, leaving the website, recall, likes)
• Downloads

Internet provider

The websites www.boellhoff.com and www.eshop.boellhof.de both use Google Analytics with the "_anonymizeIp" extension

Böllhoff has therefore activated IP anonymisation. The IP address is anonymised so that it cannot be attributed to a specific natural person.

Böllhoff uses Google Analytics with the Google Signals extension. Google Signals facilitates tracking across multiple end devices. In addition, Google uses data on users who, during their visit to the website, are also logged into a Google service and have the

“personalised ads” option activated in their Google account.

The websites www.boellhoff.com and www.eshop.boellhof.de use Google Signal with the “_anonymizeIp” extension

Böllhoff has therefore activated IP anonymisation. The IP address is anonymised so that it cannot be attributed to a specific natural person.

You can find further details of data processing by Google at:

https://policies.google.com/privacy

Legal basis for data processing

The legal basis for the use of cookies and associated data processing is the user’s consent in accordance with Article 6(1)(a) GDPR and Section 25(1) Sentence 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Böllhoff obtains users’ consent with the Usercentrics consent management tool prior to deployment of the service.

Users can raise an objection at any time with effect for the future via the Usercentrics consent management tool, by contacting the data protection officer specified in this Privacy Policy or via the contact details specified in this Privacy Policy. You can access the consent management tool via this link. Data processing conducted prior to withdrawal of consent shall remain lawful.

Purpose of data processing

The purpose of the use of Google Analytics is the needs-based design and continuous optimisation of our website. We use Google Analytics to analyse and regularly improve the use of our website. The statistics gained enable us to improve our website and make it more interesting for you as a user. Google Analytics also makes it possible to measure the success of an advertising campaign. The aim of using Google Signal is to display personalised advertising and perform tracking across end devices.

Duration of storage

According to Google, the maximum storage period, over which Böllhoff has no control, is 24 months.

Mandatory statutory retention periods remain unaffected.

Location of data processing

According to Google, data processing takes place in the EU and the USA.

Data transfer to the USA:

On 10 July 2023, the European Commission adopted Implementing Decision EU 2023/1795 on the adequate level of protection of personal data under the EU-US Data Privacy Framework. It permits data controllers and data processors to transfer personal data to certified companies in the USA.

The adequacy decision is based on the EU-US Data Privacy Framework.

Google is one of the certified companies in the USA:

www.dataprivacyframework.gov/s/participant-search

Description and scope of data processing

Böllhoff uses the advertising, analytics and marketing tool Google Ads for its website, combined with the Conversion Tracking and Remarketing Tracking extensions.

The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which is affiliated with Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google”.

It enables Böllhoff to display relevant advertisements in Google’s search engine or on third-party websites if a user enters specific search terms into Google’s search engine (keyword targeting). This service also makes it possible to display advertisements based on user data available to Google, such as the user’s geolocation data and/or known interests (affinity audience targeting). This service also makes it possible to analyse how many times users click on ads.

Google Ads Conversion Tracking records what happens when a user interacts with a Böllhoff ad, i.e. whether they subsequently become a Böllhoff customer or show an interest in Böllhoff products. This enables Böllhoff to determine how a user behaves after clicking on a Böllhoff ad, i.e. whether they subsequently visit the Böllhoff website, and examine the efficacy of Böllhoff ads.

GoogleAds Remarketing applies a remarketing code when a user visits the Böllhoff website, which adds the user to a remarketing list. Users are added to a remarketing list by means of a pseudonymised identification number allocated to their browser. The service uses the pseudonymised identification number to identify which Böllhoff advertisements have already been displayed to a given user. This enables Böllhoff to reach users of the Böllhoff website again, in a targeted manner, with advertisements aligned with their interests. This service enables Böllhoff to display personalised advertising with regard to the user’s past user behaviour and surfing behaviour, including across end devices. The data also make it possible to display advertisements across websites, as the pseudonymised identification number records the pages visited by the user.

If you have a Google Account, you can object to personalised advertising at any time and without giving a reason via the following link https://www.google.com/setting/ads/onweb/

Furthermore, you can find tools to configure your Google data protection settings at:

https://safety.google.privacy/privacy-controls/

You can find further details of data processing in relation to Google Ads, Google Conversion and Google Remarketing at

https://policies.google.com/privacy?hl=en

https://safety.google/intl/en/principles/

The following data are transferred to Google through Google Ads, Conversion and Remarketing:

• User’s IP address
• Information about the user’s browser
• Information about the user’s end device
• The date, time and duration of the visit to the website
• Geographic location
• Advertisements displayed and viewed
• Cookie ID, user ID, user identifier
• Search terms entered by the user
• User behaviour, user data
• Session data and interaction data
• Referrer URL
• Click behaviour
• Visit behaviour
• Target groups
• Remarketing identification number

Legal basis for data processing

The legal basis for the use of cookies and associated data processing is the user’s consent in accordance with Article 6(1)(a)GDPR and Section 25(1) Sentence 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Böllhoff obtains users’ consent with the Usercentrics consent management tool prior to deployment of the service.

Users can raise an objection at any time with effect for the future via the Usercentrics consent management tool, by contacting the data protection officer specified in this Privacy Policy or via the contact details specified in this Privacy Policy. You can access the consent management tool via this link. Data processing conducted prior to withdrawal of consent shall remain lawful.

Purpose of data processing

The purpose of data processing is to advertise our products and services, remarketing, analyse and produce statistics on advertisements, measure the success of advertisements and support effective, targeted marketing. It also makes it possible to display personalised advertising and reach users and/or Böllhoff customers again.

Duration of storage

Böllhoff has no control over the duration for which Google stores data

• According to Google, the maximum storage duration for conversion cookies is 30 days.
• According to Google, the storage duration for remarketing lists is up to 540 days.
• According to Google, the storage duration for Google Ads is up to 18 months.

Mandatory statutory retention periods remain unaffected.

Location of data processing

According to Google, data processing takes place in the EU and the USA.

Data transfer to the USA:

On 10 July 2023, the European Commission adopted Implementing Decision EU 2023/1795 on the adequate level of protection of personal data under the EU-US Data Privacy Framework. It permits data controllers and data processors to transfer personal data to certified companies in the USA.

The adequacy decision is based on the EU-US Data Privacy Framework.

Google is one of the certified companies in the USA:

www.dataprivacyframework.gov/s/participant-search

Description and scope of data processing

Böllhoff uses the marketing and analytics tool LinkedIn Ads with Insight Tags for its website.

The provider of LinkedIn Ads with Insight Tags is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

The Insight Tag is a conversion tracking and retargeting service.

Conversion tracking is understood as an analysis method that measures the efficacy with which advertisements induce specific actions from a user and how the user interacts with Böllhoff ads. Conversion tracking can take place across end devices. LinkedIn provides reports and notifications on target group websites and ad performance, such as whether a user who clicks on a Böllhoff ad on LinkedIn then browses the Böllhoff website. Conversion tracking with the LinkedIn Insight Tag enables Böllhoff to gather information regarding the success of its ads and understand the general characteristics of its target group. Using the data provided by LinkedIn, Böllhoff can display targeted advertisements away from its own website.

Retargeting is understood as the ability to remind a user about Böllhoff products and services after they leave the Böllhoff website, i.e. to reach them again. It enables Böllhoff to display personalised advertising to users on LinkedIn. It involves placing a cookie in the user’s browser, which indicates to LinkedIn that the user has previously visited the Böllhoff website.

According to LinkedIn, the LinkedIn Insight Tag makes it possible to collect data about visits to the Böllhoff website, including the URL, referrer URL, IP address, device properties and browser settings (user agent) as well as timestamps and website actions, such as interface clicks, page visits, form submissions, HTML DOM elements (e.g. button text and page name) and the session-specific user hash. According to LinkedIn, the user’s IP address is truncated or (if used to reach LinkedIn members across multiple devices) hashed, i.e. encrypted using an algorithm.

According to LinkedIn, the collected data are pseudonymised after seven days.

You can raise an objection with LinkedIn regarding personalised advertising at any time and without providing a reason via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Furthermore, LinkedIn members can manage and configure the use of their personal data for marketing purposes at any time in their LinkedIn account settings.

You can find further details of data processing in relation to LinkedIn Ads athttps://de.linkedin.com/legal/privacy-policy?#choices-oblig

Legal basis for data processing

The legal basis for the use of cookies and associated data processing is the user’s consent in accordance with Article 6(1)(a) GDPR and Section 25(1) Sentence 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Böllhoff obtains users’ consent with the Usercentrics consent management tool prior to deployment of the service.

Users can raise an objection at any time with effect for the future via the Usercentrics consent management tool, by contacting the data protection officer specified in this Privacy Policy or via the contact details specified in this Privacy Policy. You can access the consent management tool via this link. Data processing conducted prior to withdrawal of consent shall remain lawful.

Purpose of data processing

The purpose of data processing is advertising, conversion tracking, remarketing, optimising advertisements for the Böllhoff website, advertising to target groups on other websites and evaluating advertising campaigns.

Duration of storage

Böllhoff has no control over the duration for which LinkedIn stores data

• According to LinkedIn, the maximum storage duration for identifiers of LinkedIn members is seven days.
• According to LinkedIn, the maximum storage duration for pseudonymised data is 180 days.

Mandatory statutory retention periods remain unaffected.

Location of data processing

According to LinkedIn, data processing takes place in the EU and the USA.

Data transfer to the USA

On 10 July 2023, the European Commission adopted Implementing Decision EU 2023/1795 on the adequate level of protection of personal data under the EU-US Data Privacy Framework. It permits data controllers and data processors to transfer personal data to certified companies in the USA.

The adequacy decision is based on the EU-US Data Privacy Framework.

LinkedIn is one of the certified companies in the USA: https://www.dataprivacyframework.gov/s/participant-search

Description and purpose

We use the online questionnaire tool Phaina Advise on our website. Phaina Advise offers automated product advice: taking account of previous answers, the tool poses further questions as appropriate to determine the user’s needs as precisely as possible. At the end of the interview, the tool uses the user’s responses to recommend a product, which can be accessed via a direct link. Interviews are stored using a unique session ID. The time and answer ID of each answer is also stored. The session ID is also stored along with details of the questions posed and the product recommended at the end of the questionnaire. It is not possible to ascertain your identity on the basis of the aforementioned data. Consequently, this does not constitute processing of personal data. However, your personal data will be processed if you disclose further data so that we can contact you, such as your email address. In this case, your data will be linked with your session ID.

Legal basis

The legal basis for the use of Phaina Advise is Article 6(1)(f) GDPR. Our legitimate interest lies in offering our customers a swift and straightforward advice service that is available at all times, thereby improving access to product information.

Recipients

No personal data are transmitted to third parties.

Transfer to third countries

No personal data are transferred to third countries.

Duration of data storage

Data are deleted as soon as it is no longer needed for the purpose for which it was collected. Furthermore, data will be deleted if you assert your right to erasure in accordance with Article 17(1) GDPR.

Objection

In accordance with Article 21(1) GDPR, you have the right to object at any time to the processing of your personal data. If you exercise this right, processing will no longer take place for this purpose. You can find further information in our Privacy Policy under “Rights of the data subject”.

Contractual and legal obligations

There is no contractual or legal obligation to provide data.

Further data protection information

You can find further information about Phaina Advise at:
https://www.phaina.com/datenschutz

Note: The text above is only intended to assist in producing appropriate data protection information within the meaning of Article 13 GDPR. It is essential that you review the actual data processing situation in your individual case. Phaina GmbH assumes no liability for the up-to-dateness, accuracy or completeness of data protection information. The competent data protection officer should be engaged in each specific case.

Description and scope of data processing

Böllhoff uses the analytics tool Microsoft Clarity for its website. It facilitates the analysis of user behaviour in order to determine which pages of the Böllhoff website are of interest to the user, which pages are not of interest to them, and how they use the Böllhoff website. The analytics tool produces usage statistics, behaviour metrics (i.e. how users interact with the website), session recordings and heat maps, including based on mouse movements. Website usage data are recorded using cookies from initial and third-party suppliers as well as other tracking technologies in order to determine the popularity of products and services.

The provider of Microsoft Clarity is Microsoft Ireland Operations Limited, which is affiliated with Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter “Microsoft”).

The following data may be transferred to Microsoft:

• User’s IP address
• Information about the user’s browser and end device
• Date, time and duration of the visit to the website
• Interaction events, such as clicks, scrolling, mouse movements, changes to window size, selections, inputs
• Diagnostic events, page events, user-defined events
• Session ID, user ID
• User behaviour
• Session data and interaction data

You can find further details of data processing by Microsoft at:

https://privacy.microsoft.com/de-DE/privacystatement

https://learn.microsoft.com/en-gb/clarity/setup-and-installation/clarity-data

Legal basis for data processing

The legal basis for the use of cookies and associated data processing is the user’s consent in accordance with Article 6(1)(a)GDPR and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Böllhoff obtains users’ consent with the Usercentrics consent management tool prior to deployment of the service.

Users can raise an objection at any time with effect for the future via the Usercentrics consent management tool, by contacting the data protection officer specified in this Privacy Policy or via the contact details specified in this Privacy Policy. You can access the consent management tool via this link. Data processing conducted prior to withdrawal of consent shall remain lawful.

Purpose of data processing

The purpose of data processing is to analyse user behaviour on the Böllhoff website, optimise the Böllhoff website and improve the marketing of Böllhoff products and services.

Duration of storage

Microsoft states the following periods, over which Böllhoff has no control, for the duration of data storage:

https://learn.microsoft.com/en-gb/clarity/setup-and-installation/data-retention

Mandatory statutory retention periods remain unaffected.

Location of data processing

According to Microsoft, data processing takes place in the EU and the USA.

Data transfer to the USA:

On 10 July 2023, the European Commission adopted Implementing Decision EU 2023/1795 on the adequate level of protection of personal data under the EU-US Data Privacy Framework. It permits data controllers and data processors to transfer personal data to certified companies in the USA.

The adequacy decision is based on the EU-US Data Privacy Framework.

Microsoft is one of the certified companies in the USA:

www.dataprivacyframework.gov/s/participant-search

Description and scope of data processing

Böllhoff uses cookies for its website.

The user can accept or reject all cookies or manage them individually, with the exception of cookies that are technically strictly necessary for operation of the website.

Cookies that are not technically necessary are only activated once the user has given their consent.

Böllhoff uses a cookie consent technology from Usercentrics (consent management tool) to obtain and record users’ consent to the use of cookies and associated data processing.

The provider of this consent technology is Usercentrics GmbH, Sendlinger Strasse 7, D-80331 Munich

When you visit the Böllhoff website, if you click one of the buttons providing options for cookie use (“Decline”, “Accept”, “More information”), the following data will be transmitted to Usercentrics:

• Consent (i.e. decline/accept) data (consent ID, consent number, time/date of consent, opt-in or opt-out, banner language, customer settings, template version),
• the user’s IP address,
• geolocation,
• the user’s browser information,
• information about the user’s end device (http agent, http referrer)

You can find further details of data processing in relation to cookie consent by Usercentrics at: https://usercentrics.com/privacy-policy/

Legal basis for data processing

The legal basis for processing is Article 6(1)(c) GDPR in order to obtain the consent as required by law (Article 6(1)(a) GDPR, Article 7(1) GDPR, Section 25(1) TDDDG) from users prior to the use of cookies and associated data processing.

Purpose of data processing

The purpose of data processing is to facilitate the use of cookies on the website and associated data processing in compliance with data protection regulations.

Duration of storage

Data are stored for as long as they are needed to serve the purpose of data processing. Mandatory statutory retention periods remain unaffected.

Location of data processing

According to Usercentrics, data processing takes place in the EU.

Scope of data processing

We have integrated YouTube videos from Böllhoff into our online offer, which are stored on https://www.youtube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned below will be transferred. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under IV point 1. of this declaration will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
Further information on the purpose and scope of data collection and its use processing by YouTube is described in YouTube's privacy policy. There you will also receive further information on your rights and privacy settings: https://policies.google.com/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Legal basis

The legal basis for the processing of users' personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. Videos from Böllhoff on the YouTube platform are integrated in the extended data protection mode. It is the user's responsibility to decide whether he or she will play the video displayed to him or her, as is the case with any other possible visit to the YouTube platform at any time. Our interest in the integration of Böllhoff videos on YouTube is the presentation of our company and our products to both customers and potential applicants. A higher-quality interest of the user, who can freely decide on the playability of a video, is not apparent.

Description and scope of data processing

Böllhoff provides free technical CAD data or other files (technical data sheets) for download on the website https://eshop.boellhoff.at/en. The download is only possible for registered users and only for users who are entrepreneurs or merchants. A download by consumers is excluded.
Therefore, prior registration is required for downloading.

There are no further obligations associated with registration. It is only a prerequisite for downloading. Registration does not imply any obligation to order goods from the Böllhoff eShop. The user can therefore register solely for the purpose of downloading CAD data free of charge.

The data is entered into an input mask and transmitted to us and saved. The data will not be passed on to third parties. The following data will be processed during the registration process:

• E-mail address
• First and last name
• Company
• Street and house number
• Postcode and city
• Country
• Sales tax identification number
• The password you have chosen
• Login data (combination of e-mail address and password)

The following data is also stored at the time of registration and at each subsequent login:

• The IP address of the user
• Date and time of the act of use
• Login data

Legal basis for data processing

The legal basis for registration is Art. 6 Para. 1 S.1 lit. f GDPR.

Böllhoff is entitled to use the CAD files provided for download.
The storage of personal data is a legitimate interest of Böllhoff for the protection against infringement of these rights of use and for the protection against unauthorised disclosure to third parties and, if necessary, for the prosecution of unauthorised disclosure to third parties. On the other hand, the download is free of charge and without any obligation on the part of the user. The fact that he provides personal data for the protection of the copyrighted works made available does not outweigh the interest of Böllhoff to protect copyrighted works and to restrict access to entrepreneurs and merchants. The registration by the customer is voluntary, so that a higher-quality interest worthy of protection of the customer voluntarily submitting his data is not evident.
This data is also stored to protect against misuse of our online service.
In addition, the registration serves to prepare and fulfil a user contract to which the user is a party, so that an additional legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b GDPR.

Purpose of data processing

A registration of the user is necessary for the provision of certain contents and services on our website. In this respect, reference is made to section 2.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
This is the case for the data collected during the registration process if the registration on our website is cancelled (deletion of the user account) or changed.
You can delete your user account at any time. Due to the possibility of violation of the right of use granted to the downloaded CAD files, deletion will not take place immediately, but initially a transition to limited processing for a period of 4 years. Processing is then limited to this limited purpose and in implementation of the legal concept of Art. 18 GDPR and Art. 25 GDPR (data minimisation) these data are removed from the operative system and stored on another drive and access to the data is limited to a few persons who have received clear instructions as to when access is possible.

Insofar as commercial or tax archiving obligations exist, there is also no immediate deletion.

Possibility of opposition and elimination

As a user you have the possibility to cancel the registration at any time. You can change the data stored about you at any time.

Data protection in the case of online presences of the Böllhoff Group in social media such as YouTube, LinkedIn, Xing, kununu and Instagram

The editorial team of the Böllhoff Group is active and present within social networks and platforms in order to communicate with interested parties and users there and to be able to inform them about further offers. As the European Court of Justice (ruling of 05.06.2018 - C-210/16) has stated, in the case of these so-called fan pages, the operators of the pages are also jointly responsible for data processing in addition to the portal owners.
Therefore, the Böllhoff Group informs here about the data processing, as far as we know and can influence it.

Type and purpose of data processing

The portals collect personal data in order to evaluate user behaviour. Some of this data is made available to the operators of fan pages in anonymised form. As the operator of these fan pages, the Böllhoff Group also receives anonymised statistical data from the platform operators or via a service provider commissioned by the Böllhoff Group. No conclusions can be drawn about the respective person via this data. This data is only used to analyse user behaviour so that the Böllhoff Group can better tailor its offers to the needs and interests of its customers. The Böllhoff Group can only specify the categories of data and persons according to which the portal operator evaluates its data collection and makes it available in the form of anonymised statistics. The Böllhoff Group does not know which data is collected in total and for which purposes it is processed. We ask for your understanding that we can only inform you as far as our knowledge of the data processing and our influence on the data processing go.
However, the Böllhoff Group would like to point out that the operators of the platforms are mostly American companies and therefore their data may also be processed outside the European Union. This may give rise to risks because, for example, it could make it more difficult to enforce the rights of users. More details are provided in the data protection declarations of the individual providers.

Data protection declarations of the platforms used

1. Google / YouTube
   https://policies.google.com/privacy
2. LinkedIn
   https://www.linkedin.com/legal/privacy-policy
3. kununu
   https://privacy.xing.com/en
4. Instagram
   https://help.instagram.com

Description and scope of data processing

Böllhoff uses the marketing and analytics tool LinkedIn Ads with Insight Tags for its website.

The provider of LinkedIn Ads with Insight Tags is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

The Insight Tag is a conversion tracking and retargeting service.

Conversion tracking is understood as an analysis method that measures the efficacy with which advertisements induce specific actions from a user and how the user interacts with Böllhoff ads. Conversion tracking can take place across end devices. LinkedIn provides reports and notifications on target group websites and ad performance, such as whether a user who clicks on a Böllhoff ad on LinkedIn then browses the Böllhoff website. Conversion tracking with the LinkedIn Insight Tag enables Böllhoff to gather information regarding the success of its ads and understand the general characteristics of its target group. Using the data provided by LinkedIn, Böllhoff can display targeted advertisements away from its own website.

Retargeting is understood as the ability to remind a user about Böllhoff products and services after they leave the Böllhoff website, i.e. to reach them again. It enables Böllhoff to display personalised advertising to users on LinkedIn. It involves placing a cookie in the user’s browser, which indicates to LinkedIn that the user has previously visited the Böllhoff website.

According to LinkedIn, the LinkedIn Insight Tag makes it possible to collect data about visits to the Böllhoff website, including the URL, referrer URL, IP address, device properties and browser settings (user agent) as well as timestamps and website actions, such as interface clicks, page visits, form submissions, HTML DOM elements (e.g. button text and page name) and the session-specific user hash. According to LinkedIn, the user’s IP address is truncated or (if used to reach LinkedIn members across multiple devices) hashed, i.e. encrypted using an algorithm.

According to LinkedIn, the collected data are pseudonymised after seven days.

You can raise an objection with LinkedIn regarding personalised advertising at any time and without providing a reason via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Furthermore, LinkedIn members can manage and configure the use of their personal data for marketing purposes at any time in their LinkedIn account settings.

You can find further details of data processing in relation to LinkedIn Ads athttps://de.linkedin.com/legal/privacy-policy?#choices-oblig

Legal basis for data processing

The legal basis for the use of cookies and associated data processing is the user’s consent in accordance with Article 6(1)(a) GDPR and Section 25(1) Sentence 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Böllhoff obtains users’ consent with the Usercentrics consent management tool prior to deployment of the service.

Users can raise an objection at any time with effect for the future via the Usercentrics consent management tool, by contacting the data protection officer specified in this Privacy Policy or via the contact details specified in this Privacy Policy. You can access the consent management tool via this link. Data processing conducted prior to withdrawal of consent shall remain lawful.

Purpose of data processing

The purpose of data processing is advertising, conversion tracking, remarketing, optimising advertisements for the Böllhoff website, advertising to target groups on other websites and evaluating advertising campaigns.

Duration of storage

Böllhoff has no control over the duration for which LinkedIn stores data

• According to LinkedIn, the maximum storage duration for identifiers of LinkedIn members is seven days.
• According to LinkedIn, the maximum storage duration for pseudonymised data is 180 days.

Mandatory statutory retention periods remain unaffected.

Location of data processing

According to LinkedIn, data processing takes place in the EU and the USA.

Data transfer to the USA

On 10 July 2023, the European Commission adopted Implementing Decision EU 2023/1795 on the adequate level of protection of personal data under the EU-US Data Privacy Framework. It permits data controllers and data processors to transfer personal data to certified companies in the USA.

The adequacy decision is based on the EU-US Data Privacy Framework.

LinkedIn is one of the certified companies in the USA: https://www.dataprivacyframework.gov/s/participant-search

Description and scope of data processing

If an order is placed with one of the Böllhoff companies mentioned in I., the respective company (responsible person in the sense of data protection) may carry out a credit check. For this purpose the company name and address will be transmitted to the following service providers:
 

KSV1870 Holding AG
Wagenseilgasse 7
A-1120 Wien
Tel: 050 1870-1000
Fax: 050 1870-99 1000
E-Mail: ksv@ksv.at

This service provider uses the data and any other data available to it to determine an appropriate assessment of your creditworthiness for the respective order on the basis of mathematical-statistical procedures.
The statistical result about the possibility of non-payment is used by the responsible person alone and exclusively for the decision about the execution of the order.

In the event of a credit risk (name, address, e-mail address, details of the company and, if applicable, contract and receivables data), we also use the company mentioned and, if applicable, other cooperating credit agencies for the purpose of credit assessment and for checking the deliverability of the address given and for debt collection processing.

Purpose of data processing

The purpose of data processing and data transmission to the service provider is to protect against non-payment on the basis of Böllhoff's advance payment on account at the time of purchase.

Legal basis of data processing

The legal basis is Art. 6 para. 1 sentence 1 lit b and f GDPR. Transmissions on the basis of Art 6 I f GDPR may only take place if this is necessary to safeguard the legitimate interests of our company and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
Our legitimate interest lies in the avoidance of non-payment in advance with the delivery of goods.
Avoiding a financial risk of default is a justified interest if the customer himself demands advance payment from Böllhoff.

Duration of storage

The credit query and its result will be deleted after release or rejection of the order, subject to legal retention periods.

Right of objection

You can object to a credit check and the transmission of your data to the above-mentioned service provider at any time. Please contact the responsible person listed under I. for further information.
Böllhoff will not transmit any data to the above-mentioned financial service provider after your objection.
However, the respective Böllhoff company reserves the right to refuse delivery in this case.

If personal data are processed by you, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

1. Right to information

You can ask the person responsible to confirm whether personal data concerning you will be processed by him or her.
If such processing has taken place, you can request the following information from the person responsible:

1. the purposes for which the personal data are processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
4. the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or deletion of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. any available information on the origin of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

2. The right to correction

You have a right of rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.

3. Right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

1. if you dispute the accuracy of the personal data concerning you for a period that enables the data controller to verify the accuracy of the personal data;
2. the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
3. the data controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or
4. if you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

4. Right to cancellation

a) Duty to delete
You may request the data controller to delete the personal data relating to you without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:

1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a, and there is no other legal basis for the processing.
3. You file an objection against the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 GDPR.
4. The personal data concerning you have been obtained unlawfully is processed.
5. The deletion of personal data relating to you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.

b) Information to third parties
If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c) Exceptions
The right to cancellation does not exist insofar as the processing is necessary

1. to exercise freedom of expression and information;
2. for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
3. to assert, exercise or defend legal claims.

5. Right to information

If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
The person responsible shall have the right to be informed of such recipients.

6. Right to data transferability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided that

1. processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
2. processing is carried out by means of automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

7. Right of objection

You have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 sentence 1 letter f GDPR for reasons arising from your particular situation.
The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

If you would like to make use of your right of objection, please inform the respective responsible person under one of the contact possibilities mentioned in I.

8. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation (no retroactive effect of the revocation). If you would like to make use of your right of revocation, please inform the respective responsible person under one of the contact possibilities mentioned in I.

9. Automated decision in individual cases

You have the right not to be subject to a decision based exclusively on automated processing that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the person responsible,
2. the legislation of the Union or of the Member States to which the person responsible is subject is admissible and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
3. with your express consent.

In the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.

10. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

We use the most common SSL procedure (Secure Socket Layer) in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

This data protection declaration is valid as of November 2025

Due to future changes and extensions of our online offer or due to changed legal or official requirements, a change of this data protection declaration may become necessary. You can find the current data protection declaration at https://www.boellhoff.com/at-en or https://eshop.boellhoff.at/en.