eShop Search
Country and language
Choose country:
Choose language:
Apply
  1. Böllhoff Germany
  2. Privacy Policy

Site services

Privacy policy

Within the meaning of the Basic Data Protection Ordinance (GDPR).

Transparency is important to us

This data protection declaration serves the transparency of data processing in the sense of detailed information of the data subject regarding the processing of his personal data by the data controller. The person concerned is also addressed below with "you", "user", "customer"; the person responsible in each case also with "we" or "us", "company"

I. Name and contact details of the person responsible

The person responsible within the meaning of the Basic Data Protection Ordinance (GDPR) and other national data protection laws of the member states as well as other data protection regulations:

For the operation and use of the Böllhoff website

at https://www.boellhoff.com/en

Wilhelm Böllhoff GmbH & Co. KG
Archimedesstraße 1-4
33649 Bielefeld
Germany
Tel.: +49 521 4482-01
E-mail: privacy@boellhoff.com
Imprint

Wilhelm Böllhoff GmbH & Co. KG is also responsible if you contact this company, conclude contracts with it or for any other communication between you and this company.

For the operation and use of the Böllhoff eShop

at https://eshop.boellhoff.de/en

Böllhoff GmbH
Archimedesstraße 1-4
33649 Bielefeld
Germany
Tel.: +49 521 4482-03
E-mail: privacy@boellhoff.com
Imprint

Böllhoff GmbH is also responsible if you contact this company, conclude contracts with it or for any other communication between you and this company.

II. Name and contact details of the data protection officer

Wilhelm Böllhoff GmbH & Co. KG

Jens Placke
Tel.: +49 521 4482-01
E-mail: privacy@boellhoff.com

Böllhoff GmbH

Jens Placke
Tel.: +49 521 4482-03
E-mail: privacy@boellhoff.com

III. General information on data processing

1. Scope of the processing of personal data

We process personal data of our users and customers only to the extent necessary to achieve the purpose pursued with the data processing.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1 S.1. lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 f GDPR serves as the legal basis for processing.

3. Data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject.

4. Category of persons concerned

The persons concerned by the data processing are categorized in:
Natural persons as customers, interested parties and other visitors, summarized as "users or customers".

5. Passing on of data

A passing on of data to third parties does not take place in principle. If it takes place, then on a statutory basis, for example pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you when data is passed on to transport companies for the purpose of delivering the goods ordered by the Customer. A disclosure to third parties may also take place if there is a legal obligation to do so, pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, if you have given your consent, Art. 6 para. 1 sentence 1 lit a GDPR or the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the person concerned, which require the protection of personal data, prevail.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website https://www.boellhoff.com/en and https://eshop.boellhoff.de/en, the browser used on your device automatically sends information and data to the server of our website. This information and data is temporarily stored in a so-called log file.
If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.
If you wish to view our website, our system collects the following information and data from the computer system of the calling computer without your intervention and stores it until it is automatically deleted:

  1. Information about the browser type and version used
  2. The user's operating system
  3. The Internet service provider of the user
  4. The IP address of the user
  5. Date and time of the request
  6. Websites from which the user's system reaches our website
  7. Websites accessed by the user's system via our website
  8. Name and URL of the file retrieved
  9. Amount of data transmitted in each case
  10. Time zone difference to Greenwich Mean Time (GMT)
  11. Access status/HTTP status code

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 Par. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purposes listed under point 3. Since we do not use the data mentioned in paragraph 1. in any case to draw conclusions about your person, our interests outweigh.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure that the website functions properly and to ensure a smooth connection to the website. In addition, the data serves us to optimize the website, to guarantee comfortable use of our website and to ensure the security of our information technology systems in terms of system security and stability. An evaluation of the data for marketing purposes does not take place in this context.

In these purposes also lies our legitimate interest in data processing according to Art. 6 Para. 1 S.1 lit. f GDPR (see No. 2.).

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. If the data is stored in log files, this is the case after seven days at the latest.

5. Possibility of opposition and elimination

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

6. External service providers

We use an external webhosting service provider to process your data. This is carefully selected and commissioned by us and is bound by our instructions and is regularly checked by us. Technical and organisational measures have been taken to ensure the security of your data. It is based in the Federal Republic of Germany.

7. Content Delivery Network

For the distribution of our online offer - especially large media files - we use a so-called Content Delivery Network (CDN). Our CDN is a network of regionally distributed servers of our technical service providers (order processors) connected via the Internet. When the online offer is called up, the Internet browser or the programme with which the offer is called up automatically transmits information to these service providers, which is collected in corresponding log files, the so-called server log files, and processed on servers within the European Union. The server log files are anonymised on these servers and then transmitted to the USA without any personal reference. The server log files are stored there for 90 days and then automatically deleted. The server log files include, in particular, details of the browser and operating system used, an indication of the origin of the previously visited pages (so-called referral URL), the IP address of the device used, the name of the Internet provider, as well as the date and time of all page views under the offer, including the amount of data transmitted. In addition, in order to optimise the video quality and ensure the accessibility of the videos, technical, non-personal data in the form of video start time, technically caused interruptions and loading times, received quality and network information are collected at evaluation servers.tagesschau.de generally also collects measurement data about the offer in order to determine metrics such as loading times, transmission speed, file sizes etc. (monitoring). This enables the functionality of the service on the respective end device to be checked and improved. This data is processed by the technical service provider on servers within the European Union and then transmitted anonymously and without personal reference to the USA for evaluation. After the legal storage periods have expired, the anonymised measurement data is automatically deleted.

V. Use of cookies

1. Description and scope of data processing

Our website at https://www.boellhoff.com/en and the Böllhoff eShop at https://eshop.boellhoff.de/en use cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system and through which certain information flows to the site that places the cookie (here by us). When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again. Cookies do no damage to your end device, do not contain viruses, Trojans or other malware.

Our website uses cookies, which are necessary for the display of the website. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. These are technically necessary cookies for the operation of the website.
The website https://www.boellhoff.com/en and the Böllhoff eShop do not use cookies for marketing purposes or for advertising tracking. Flash cookies are also not used.

The following data is stored and transmitted in the cookies, for example:

  1. Language settings
  2. Items in a shopping cart
  3. Log-in information
  4. Indication of origin of the cookie

On the website https://www.boellhoff.com/en and in the Böllhoff eShop at https://eshop.boellhoff.de/en, technically unnecessary cookies are also used within the scope of google Analytics. For this purpose, reference is made to XI. of this data protection declaration (Google Analytics), which determine an analysis of the surfing behaviour of the users.
Otherwise Böllhoff does not use technically unnecessary cookies on the website https://www.boellhoff.com/en or in the Böllhoff eShop at https://eshop.boellhoff.de/en nor do we use cookies for marketing purposes or Flash cookies.

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purpose of data processing set out in Section 3.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:

  1. Shopping Cart
  2. Accepting language settings
  3. Remembering search terms
  4. Log-in information

For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 Para. 1 S.1 lit. f GDPR (Section 2.).

The user data collected by technically necessary cookies are not used to create user profiles. A so-called profiling of the user does not take place at Böllhoff.
For the purpose of data processing at Google Analytics, reference is made to XI. of this data protection declaration (Google Analytics).

4. Duration of storage, possibility of objection and elimination

Cookies are stored on the user's computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full. The so-called session cookies used by Böllhoff are automatically deleted when you log out or close your browser.

VI. Newsletter

1. Description and scope of data processing

You can subscribe to a free newsletter on our website. The advertised goods and services are mentioned in the declaration of consent. When registering for the newsletter, the data from the input mask is transmitted to us.

The only mandatory information for sending the newsletter is your e-mail address. The indication of further, separately marked data (first name, surname) is voluntary and is used to be able to address you personally.

In addition, the following data is collected and stored during registration:

  1. IP address of the calling computer
  2. Date and time of the declaration of consent (registration)
  3. Content of the declaration of consent

Your consent will be obtained for the processing of your data during the registration process.

For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after 7 days.

For the purpose of proof of your registration, the following additional data will be collected and stored in the double-opt-in procedure:

  1. Date and time of confirmation
  2. Contents of the confirmation mail
  3. IP address of the calling computer

In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

The newsletter is sent after the user has registered on our website. In doing so, the user gives his consent, which can be revoked at any time, to the sending of the newsletter. No newsletter will be sent without your consent.
The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 Par. 1 S.1 lit. a GDPR.
The legal basis for the storage of the registration and confirmation data mentioned under item 1. is Art. 6 Para. 1 S.1 lit. f GDPR for protection against civil and competition law claims, in order to be able to provide proof of the user's consent.

3. Purpose of data processing

The collection of the user's e-mail address serves to send the newsletter.

The collection of other personal data within the registration process serves to prevent misuse of the services or the e-mail address used as well as to be able to clarify a possible misuse of your personal data and to be able to prove your consent. This is at the same time our legitimate interest according to clause 2.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

5. Possibility of revocation

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the cancellation link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint (included in every newsletter e-mail). The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation).

VII. Advertising mails

1. Description and scope of data processing

Wilhelm Böllhoff GmbH & Co. KG, Böllhoff GmbH and Böllhoff Verbindungstechnik GmbH would like to send their customers or users regular information, newsletters, trade fair invitations, feedback requests, training opportunities, offers and advertising about fasteners and assembly technology as well as related technical and logistical services and products of the Böllhoff Group (in detail at www.boellhoff.com) by e-mail:

For this the respective company requires the prior consent of the customer or the user to the sending of these advertising e-mails and to the storage of the date (e-mail address) required for the sending.

In case of the consent of the customer or the user, his e-mail address will be processed in order to be able to send him the advertising. The provision of further data, such as first names and surnames, is voluntary and is used in order to address the customer or the user personally.

The customer and the user are informed that they are neither contractually nor legally obliged to give their consent for the sending of information, newsletters, trade fair invitations, feedback requests, training opportunities, offers and advertising about products and services of the respective Böllhoff company and the Böllhoff Group, but that this is solely on a voluntary basis, without the refusal of consent having any legal disadvantage or other disadvantage for the customer or the user.

In addition to the e-mail address, the following data is also collected and stored when the consent is obtained:

  1. IP address of the calling computer
  2. Date and time of the declaration of consent (registration)
  3. Content of the declaration of consent

The so-called double opt-in procedure is used to obtain consent. This means that after the customer has given his consent, we will send an e-mail to the e-mail address provided asking him to confirm that he agrees to the sending of advertising e-mails. If confirmation is not received within 24 hours, the information will be blocked and automatically deleted after 7 days.

For the purpose of proof of consent, the following additional data is collected and stored in the double-opt-in procedure:

  1. Date and time of confirmation
  2. Contents of the confirmation mail
  3. IP address of the calling computer

The data will not be passed on to third parties in connection with data processing for sending advertising e-mails. The data will be used exclusively for sending advertising e-mails.

2. Legal basis for data processing

The legal basis for the storage of the e-mail address and, if applicable, first names and surnames, is the consent to the sending of advertising e-mails by the user or customer, which may be revoked at any time. No advertising e-mails will be sent without your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
Furthermore, the legal basis for the storage of the consent and confirmation data mentioned under No.  1. is Art. 6 Para. 1 S.1 lit f GDPR for protection against civil and competition law claims, in order to be able to provide proof of the user's and the customer's consent.

3. Purpose of data processing

The collection of the user's e-mail address serves to send the advertising mail.

The collection of other personal data as part of the consent process serves to prevent misuse of the services or the e-mail address used as well as to clarify a possible misuse of your personal data and to be able to prove the consent given by the user or customer. This is at the same time our legitimate interest according to clause 2.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The e-mail address and, if applicable, first name and surname of the user will therefore be stored as long as the consent is not revoked. After the revocation, which is possible at any time, the data will be deleted immediately.

5. Possibility of revocation

The consenting party has the right to revoke his consent at any time. The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation).
The cancellation can be declared by clicking on the cancellation link provided in each advertising e-mail or by sending a message to the contact details given in the imprint (included in each advertising e-mail).

VIII. Registration and ordering in the Böllhoff eShop

1. Description and scope of data processing

In order to be able to order goods in the Böllhoff eShop, a previous registration by you is necessary. Registration is also used for access control.
A guest order is not possible.
Mandatory information is provided upon registration. Your sales tax identification number will also be requested, as the Böllhoff eShop is only aimed at entrepreneurs and merchants.

Subsequent data will be processed during registration:

  • E-mail address
  • First and last name
  • Company
  • Street and house number
  • Postcode and city
  • Country
  • Sales tax identification number
  • The password you have chosen
  • Login data (combination of e-mail address and password)
  • In the case of voluntary declaration:
  • Phone number
  • Fax number

The input is voluntary, without complete input of the mandatory data the registration and activation of the customer account can not take place.
We need the mandatory data in order to process your order.
The indication of your telephone number, fax number is voluntary. It serves a fast establishment of contact with questions in connection with the completion of your order. Your e-mail address is also your username.

The following data is also stored at the time of registration and at each subsequent login:

  1. The IP address of the user
  2. Date and time of the act of use
  3. Login data

When ordering goods in the Böllhoff eshop, we process your inventory data (name, address, VAT ID) as well as contact data (e-mail address, contact person) and your contract data (type and quantity of ordered goods, payment information) as well as content data when you send us information about your order.

2. Legal basis for data processing

The legal basis for processing your customer data to fulfil the contract concluded via the Böllhoff eShop is Art. 6 Para. 1 S.1 lit. b GDPR.

Legal basis for the registration and the exclusion of a guest order possibility is Art. 6 Abs. 1 S.1 lit. f GDPR.
The registration of the customer serves to ensure that only entrepreneurs or merchants and no consumers can order goods in the Böllhoff eShop. The Böllhoff eShop is a B2B shop that does not sell to consumers. Access control takes place in order to exclude orders from consumers to whom the Böllhoff eShop does not address.
The registration enables the prior verification of the specified VAT identification number and only after a positive verification is the customer account activated.
Since the data provided during registration is also required in the context of an order for contract processing, with the exception of the sales tax identification number, no higher-value interests of the customer worthy of protection are apparent that speak against prior registration. In addition, the customer has the option of deleting the customer account created during registration at any time. The registration by the customer is voluntary, so that a higher-quality interest worthy of protection of the customer voluntarily submitting his data is not evident.
This data is also stored to protect against misuse of our online service.

3. Purpose of data processing

The purpose of data processing is on the one hand to ensure access control to the Böllhoff eShop and on the other hand to contractually process the customer's orders.

4. Duration of storage, possibility of objection and elimination

Due to legal, in particular tax regulations, we are obliged to store your address, payment and order data for a period of ten years. However, we will limit the processing of your order data after 24 months (expiry of the warranty period + 1 month), i.e. your data will only be used to comply with legal obligations, unless you have given us your consent to permanently store your order data in your customer account.
The legal basis for the limited processing of your personal data is the fulfilment of statutory archiving and storage obligations under tax and commercial law, Art. 6 Para. 1 S.1 lit. c GDPR. According to this standard, processing to fulfil a legal obligation to which the person responsible is subject is permissible - this includes the tax law obligations to retain data. Processing is then limited to this limited purpose and, in accordance with the legal concept of Art. 18 GDPR and Art. 25 GDPR (data minimisation), this data is removed from the operational system and stored on another drive and access to the data is limited to a few persons who have received clear instructions as to when access is possible.
If you have registered, we store your registration data, also information about the method of payment, but not your order data (see above) until you finally delete your access. You can delete your customer account at any time. Furthermore, we store the voluntary data provided by you for the duration of your use of your account, unless you delete it beforehand. You can manage and change all information in the protected customer area.
If you still have legal storage obligations in the event of deletion or if the warranty period for the goods ordered by you has not yet expired, your data will initially be processed to a limited extent as soon as your customer account is deleted (see above).
After expiry of the legal storage period, your data will be permanently deleted.

5. Customer data will only be passed on to third parties in the following cases

Your personal data will not be passed on to third parties unless you have given us your prior consent. Excluded from this is the passing on to parcel services or forwarding agencies for order processing and delivery of the goods ordered by you. Only the data absolutely necessary for delivery will be transmitted.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

IX. Provision of contractual services outside the Böllhoff eShop (stationary trade, orders by telephone, fax, letter)

1. Scope of data processing

The person responsible processes your inventory data (name, address, sales tax identification number) as well as the relevant contact data (e.g. telephone or e-mail address or fax number and the contact person) and your contract data (type and quantity of ordered goods, payment information) as well as content data when you notify them of your order.

2. Purpose of data processing

The purpose of data processing is the contractual processing of orders and orders from customers.

3. Legal basis of data processing

The legal basis for the processing of your customer data for the fulfilment of a concluded contract and for the fulfilment of orders is Art. 6 Para. 1 S.1 lit. b GDPR.

4. Storage time

Due to legal, in particular tax regulations, the responsible person is obliged to store your address, payment and order data for a period of ten years. However, after 24 months (expiry of the warranty period + 1 month response time), the person responsible restricts the processing, i.e. your data will only be used to comply with legal obligations. The legal basis for the limited processing of your personal data is Art. 6 Para. 1 S.1 lit. c GDPR for the fulfilment of statutory archiving and storage obligations under tax and commercial law. According to this standard, processing to fulfil a legal obligation to which the person responsible is subject is permissible - this includes the tax law obligations to retain data. Processing is then limited to this limited purpose and in implementation of the legal concept of Art. 18 GDPR and Art. 25 GDPR (data minimisation) these data are removed from the operative system and stored on another drive and access to the data is limited to a few persons who have received clear instructions as to when access is possible.

After expiry of the legal storage period, your data will be permanently deleted.

5. Customer data will only be passed on to third parties in the following cases

Your personal data will not be passed on to third parties unless you have given us your prior consent. Excluded from this is the passing on to parcel services or forwarding agencies for order processing and delivery of the goods ordered by you. Only the data absolutely necessary for delivery will be transmitted.

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

X. Contact form, callback form, returns form and e‑mail contact

1. Description and scope of data processing

If you send us an inquiry (by contact form, by callback form, by return form) you declare your consent to the processing of the data you have entered and given.
When you contact us by e-mail or via the contact forms provided on the website, the data provided by you will be stored by us in order to answer your questions and process your request.
There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored.

At the time the message is sent via the contact form, the following data is also stored:

  1. The IP address of the user
  2. Date and time of dispatch

Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored.

In this context, the data will not be passed on to third parties. The data is used exclusively for the execution of the inquiry.

2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 Para. 1 S.1 lit. a GDPR if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 sentence 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 S.1 lit. b GDPR.

3. Purpose of data processing

The purpose of data processing is to process and answer your inquiry and your request.
The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is over when it can be inferred from the circumstances that the matter in question has been finally clarified, e.g. your inquiry has been answered and thus settled.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of revocation, objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation). If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. You can revoke your consent as well as your objection at any time by sending a message to

Wilhelm Böllhoff Gmbh & Co. KG
Archimedesstr. 1 - 4
33649 Bielefeld
Germany
Tel.: +49 521 4482-01
E-mail: info@boellhoff.com

if you have used their contact form (at https://www.boellhoff.com/en) or have sent an e-mail to them.


You can revoke your consent as well as your objection at any time by sending a message to

Böllhoff GmbH
Archimedesstr. 1-4
33649 Bielefeld
Germany
Tel.: +49 521 4482-1319
E-mail: eshop@boellhoff.com

if you have used their contact form (at https://eshop.boellhof.de/en) or have sent an e-mail to them.

XI. Web analysis by Google Analytics

1. Scope of data processing

This website uses Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA hereinafter "google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (such as browser type/browser version, operating system used, referrer URL (previously visited page), IP address, time of server request) is generally transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. For these exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use.

The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

Both the websites https://www.boellhoff.com/en and https://eshop.boellhoff.de/en use Google Analytics with the extension "_anonymizeIp".
IP anonymization is therefore activated at Böllhoff. The IP address is made anonymous, so that an assignment to a certain natural person is not possible. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.

2. Purpose of data processing

The purpose of the use of google-analytics is the demand-oriented design and continuous optimization of our website. We use Google Analytics to analyse and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user.

3. Legal basis

The use of google analytics is based on Art. 6 Para. 1 S.1 lit. f GDPR. With the use of Google Analytics we want to ensure a demand-oriented design and continuous optimization of our website. Furthermore, we want to record the use of our website statistically and evaluate it for the purpose of optimizing our offer. Since your IP address is made anonymous and therefore no longer personally identifiable, our interest in optimising our website through the use of Google Analytics predominates. By anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4. Elimination possibility

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
If you want to prevent the collection of data by Google Analytics, you can object via the opt-out link and deactivate data collection. This deactivation is stored in the cookies. Please note that this setting is lost if you delete the cookie.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the available browser add-on.

5. Third Party Information

Information of the third party provider, including data protection in connection with Google Analytics: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions: https://www.google.com/analytics/terms/gb.html, data protection overview: https://support.google.com/analytics/answer/6004245, and data protection declaration: https://policies.google.com/privacy

XII. Integration of YouTube videos

1. Scope of data processing

We have integrated YouTube videos from Böllhoff into our online offer, which are stored on https://www.youtube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned below will be transferred. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under IV point 1. of this declaration will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
Further information on the purpose and scope of data collection and its use processing by YouTube is described in YouTube's privacy policy. There you will also receive further information on your rights and privacy settings: https://policies.google.com/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2. Legal basis

The legal basis for the processing of users' personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. Videos from Böllhoff on the YouTube platform are integrated in the extended data protection mode. It is the user's responsibility to decide whether he or she will play the video displayed to him or her, as is the case with any other possible visit to the YouTube platform at any time. Our interest in the integration of Böllhoff videos on YouTube is the presentation of our company and our products to both customers and potential applicants. A higher-quality interest of the user, who can freely decide on the playability of a video, is not apparent.

XIII. Applications at Böllhoff

Concerns applications submitted via our website https://www.boellhoff.com/de or our career portal https://career.boellhoff.com.

1. scope of data processing

If you apply to one of the companies mentioned in I., the company will process your address, communication and application data and all data and information that you have provided to us for the purpose of the application. The data processing is limited to the execution of the application procedure.

2. Legal basis for data processing

The legal basis for the processing of your application data and the information you have provided to us for the purpose of your application is Art. 6 para. 1 sentence 1 lit. b DSGVO as well as Section 26 I BDSG,

If you have given us your consent for the processing of your application data, Art. 6 para. 1 sentence 1 lit. a DSGVO as well as § 26 II BDSG are further legal basis.

3. Purpose of data processing

The purpose of processing your application data and the information you have provided to us in connection with your application is to carry out the application procedure.

The data processing also serves to enable us to contact you in connection with your application procedure.

4. Duration of storage

If your application does not result in employment, your application data and any other information you have provided to us in connection with your application will be deleted 12 months after completion of the application process. Storage until then serves documentation purposes.

Should your application lead to employment with a company of the Böllhoff Group, your application documents will be added to the personnel file of this company.

If you have given us permission to process your data in order to inform you about suitable job offers in the future, we will store your data until you withdraw your permission.

5. passing on to third parties

Your application data and the information you send us in connection with your application will not be passed on to third parties.
The data processing serves exclusively to process your application.

If you have given us your consent, your application data and the information you have sent in connection with your application may be transferred to other companies in the Böllhoff Group and processed there.

6. Possibility of revocation and removal

If you have given us your consent, you have the option of revoking your consent to the processing of your personal data in connection with your application at any time. The revocation does not change the lawfulness of the data processing that took place until the revocation.

If you contact us by e-mail or in writing, you can object to the storage of your personal data at any time.

In such a case, the application process cannot be continued. You can revoke your consent as well as your objection at any time by sending a message to

Wilhelm Böllhoff GmbH & Co. KG
Archimedesstr. 1-4
33649 Bielefeld
Germany

Phone: +49 521 4482-01
E-mail: personal@boellhoff.com

XIV. Registration for CAD download

1. Description and scope of data processing

Böllhoff provides free technical CAD data or other files (technical data sheets) for download on the website https://eshop.boellhoff.de/en. The download is only possible for registered users and only for users who are entrepreneurs or merchants. A download by consumers is excluded.
Therefore, prior registration is required for downloading.

There are no further obligations associated with registration. It is only a prerequisite for downloading. Registration does not imply any obligation to order goods from the Böllhoff eShop. The user can therefore register solely for the purpose of downloading CAD data free of charge.

The data is entered into an input mask and transmitted to us and saved. The data will not be passed on to third parties. The following data will be processed during the registration process:

  • E-mail address
  • First and last name
  • Company
  • Street and house number
  • Postcode and city
  • Country
  • Sales tax identification number
  • The password you have chosen
  • Login data (combination of e-mail address and password)

The following data is also stored at the time of registration and at each subsequent login:

  1. The IP address of the user
  2. Date and time of the act of use
  3. Login data

2. Legal basis for data processing

The legal basis for registration is Art. 6 Para. 1 S.1 lit. f GDPR.

Böllhoff is entitled to use the CAD files provided for download.
The storage of personal data is a legitimate interest of Böllhoff for the protection against infringement of these rights of use and for the protection against unauthorised disclosure to third parties and, if necessary, for the prosecution of unauthorised disclosure to third parties. On the other hand, the download is free of charge and without any obligation on the part of the user. The fact that he provides personal data for the protection of the copyrighted works made available does not outweigh the interest of Böllhoff to protect copyrighted works and to restrict access to entrepreneurs and merchants. The registration by the customer is voluntary, so that a higher-quality interest worthy of protection of the customer voluntarily submitting his data is not evident.
This data is also stored to protect against misuse of our online service.
In addition, the registration serves to prepare and fulfil a user contract to which the user is a party, so that an additional legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b GDPR.

3. Purpose of data processing

A registration of the user is necessary for the provision of certain contents and services on our website. In this respect, reference is made to section 2.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
This is the case for the data collected during the registration process if the registration on our website is cancelled (deletion of the user account) or changed.
You can delete your user account at any time. Due to the possibility of violation of the right of use granted to the downloaded CAD files, deletion will not take place immediately, but initially a transition to limited processing for a period of 4 years. Processing is then limited to this limited purpose and in implementation of the legal concept of Art. 18 GDPR and Art. 25 GDPR (data minimisation) these data are removed from the operative system and stored on another drive and access to the data is limited to a few persons who have received clear instructions as to when access is possible.

Insofar as commercial or tax archiving obligations exist, there is also no immediate deletion.

5. Possibility of opposition and elimination

As a user you have the possibility to cancel the registration at any time. You can change the data stored about you at any time.

XV. Chatbot

1. Description and scope of data processing

Each time the chatbot is used, chat histories including the date and time of the request are temporarily stored if the use of the chatbot is consented to.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p.1 lit. f DSGVO. Our legitimate interest follows from the purposes listed in section 3. Since we do not use the data listed in section 1 to draw conclusions about your person, our interests prevail.

3. Purpose of data processing

The temporary storage of chat histories is necessary to further develop the chatbot and to provide our visitors with a service that is helpful.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f DSGVO (see point 2.).

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

5. Possibility of objection and removal

Data can be deleted at any time via the menu in the chatbot or by entering "Delete data" in the chat window. Afterwards, your data will be completely deleted.

6. External service providers

In order to further develop and optimise the chatbot, we work together with the company mercury.ai.

XVI. Social Media

1. Data protection in the case of online presences of the Böllhoff Group in social media such as YouTube, LinkedIn, Xing, kununu and Instagram

The editorial team of the Böllhoff Group is active and present within social networks and platforms in order to communicate with interested parties and users there and to be able to inform them about further offers. As the European Court of Justice (ruling of 05.06.2018 - C-210/16) has stated, in the case of these so-called fan pages, the operators of the pages are also jointly responsible for data processing in addition to the portal owners.
Therefore, the Böllhoff Group informs here about the data processing, as far as we know and can influence it.

2. Type and purpose of data processing

The portals collect personal data in order to evaluate user behaviour. Some of this data is made available to the operators of fan pages in anonymised form. As the operator of these fan pages, the Böllhoff Group also receives anonymised statistical data from the platform operators or via a service provider commissioned by the Böllhoff Group. No conclusions can be drawn about the respective person via this data. This data is only used to analyse user behaviour so that the Böllhoff Group can better tailor its offers to the needs and interests of its customers. The Böllhoff Group can only specify the categories of data and persons according to which the portal operator evaluates its data collection and makes it available in the form of anonymised statistics. The Böllhoff Group does not know which data is collected in total and for which purposes it is processed. We ask for your understanding that we can only inform you as far as our knowledge of the data processing and our influence on the data processing go.
However, the Böllhoff Group would like to point out that the operators of the platforms are mostly American companies and therefore their data may also be processed outside the European Union. This may give rise to risks because, for example, it could make it more difficult to enforce the rights of users. More details are provided in the data protection declarations of the individual providers.

3. Data protection declarations of the platforms used

  1. Google / YouTube
    https://policies.google.com/privacy
  2. LinkedIn
    https://www.linkedin.com/legal/privacy-policy
  3. Xing
    https://privacy.xing.com/en
  4. kununu
    https://privacy.xing.com/en
  5. Instagram
    https://help.instagram.com

XVII. Credit assessment

1. Description and scope of data processing

If you choose the payment method "invoice" when placing an order with one of the Böllhoff companies mentioned in I., the respective company (responsible in terms of data protection) will carry out a credit check for an order value of € 1,000.00 net or more. For this purpose, company name and address are transmitted to the following service provider:

a)
CRIF Bürgel GmbH
Friesenweg 4, Haus 12
22763 Hamburg
Germany
E-mail: info@buergel.de
Tel.: +49 40 89803-0
Fax: +49 40 8980377

This service provider uses the data and any other data available to it to determine an appropriate assessment of your creditworthiness for the respective order on the basis of mathematical-statistical procedures.
The statistical result about the possibility of non-payment is used by the responsible person alone and exclusively for the decision about the execution of the order with the desired method of payment "purchase on account".

You can request information about the data stored about you at any time from the above-mentioned service provider under the above-mentioned contact data or at https://www.crifbuergel.de/de/kontakt/selbstauskunft.

The data protection regulations of this service provider can be found at
https://www.crifbuergel.de/en/privacy.

b)
In the event of a credit risk (name, address, e-mail address, information on the company and, if applicable, contract and receivables data), we will transmit your data to
IHD Gesellschaft für Kredit und Forderungsmanagement mbH,
Augustinus Straße 11 B,
50226 Frechen,
Germany,

and, if necessary, to other cooperating credit agencies.

For the purpose of deciding on the establishment, execution or termination of the contractual relationship, we also collect or use automatically generated probability values, the calculation of which may include address data, among other things.

Detailed information on our contractual partner, the IHD, within the meaning of Art. 14 GDPR, i.e. the business purpose, the purpose of the data storage there, the legal basis, the data recipients of the IHD, the right to self-disclosure and the right to cancellation and correction as well as to profiling can be found at
www.ihd.de/datenschutz/Artikel14.html

You can find information on their contractual partners in the area of credit agencies under:
www.ihd.de/datenschutz#vertragspartner

2. Purpose of data processing

The purpose of data processing and data transmission to the service provider is to protect against non-payment on the basis of Böllhoff's advance payment on account at the time of purchase.

3. Legal basis of data processing

The legal basis is Art. 6 para. 1 sentence 1 lit b and f GDPR. Transmissions on the basis of Art 6 I f GDPR may only take place if this is necessary to safeguard the legitimate interests of our company and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
Our legitimate interest lies in the avoidance of non-payment in advance with the delivery of goods.
Avoiding a financial risk of default is a justified interest if the customer himself demands advance payment from Böllhoff.

4. Duration of storage

The credit query and its result will be deleted after release or rejection of the order, subject to legal retention periods.

5. Right of objection

You can object to a credit check and the transmission of your data to the above-mentioned service provider at any time. Please contact the responsible person listed under I. for further information.
Böllhoff will not transmit any data to the above-mentioned financial service provider after your objection.
However, the respective Böllhoff company reserves the right to refuse delivery on account in this case.

XVIII. Rights of the data subject

If personal data are processed by you, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

1. Right to information

You can ask the person responsible to confirm whether personal data concerning you will be processed by him or her.
If such processing has taken place, you can request the following information from the person responsible:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data being processed;
  3. the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
  4. the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
  5. the existence of a right to rectification or deletion of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. any available information on the origin of the data if the personal data are not collected from the data subject;
  8. the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

2. The right to correction

You have a right of rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.

3. Right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

  1. if you dispute the accuracy of the personal data concerning you for a period that enables the data controller to verify the accuracy of the personal data;
  2. the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
  3. the data controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or
  4. if you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

4. Right to cancellation

a) Duty to delete
You may request the data controller to delete the personal data relating to you without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:

  1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a, and there is no other legal basis for the processing.
  3. You file an objection against the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 GDPR.
  4. The personal data concerning you have been obtained unlawfully is processed.
  5. The deletion of personal data relating to you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.

b) Information to third parties
If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c) Exceptions
The right to cancellation does not exist insofar as the processing is necessary

  1. to exercise freedom of expression and information;
  2. for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
  3. to assert, exercise or defend legal claims.

5. Right to information

If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
The person responsible shall have the right to be informed of such recipients.

6. Right to data transferability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided that

  1. processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
  2. processing is carried out by means of automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

7. Right of objection

You have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 sentence 1 letter f GDPR for reasons arising from your particular situation.
The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

If you would like to make use of your right of objection, please inform the respective responsible person under one of the contact possibilities mentioned in I.

8. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation (no retroactive effect of the revocation). If you would like to make use of your right of revocation, please inform the respective responsible person under one of the contact possibilities mentioned in I.

9. Automated decision in individual cases

You have the right not to be subject to a decision based exclusively on automated processing that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and the person responsible,
  2. the legislation of the Union or of the Member States to which the person responsible is subject is admissible and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
  3. with your express consent.

In the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.

10. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

XIX. Data Security

We use the most common SSL procedure (Secure Socket Layer) in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

XX. Up-to-dateness and amendment of this data protection declaration

This data protection declaration is valid as of February 2022

Due to future changes and extensions of our online offer or due to changed legal or official requirements, a change of this data protection declaration may become necessary. You can find the current data protection declaration at https://www.boellhoff.com/de-en or  https://eshop.boellhoff.de/en.