Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.

1. Access data and hosting

You may visit our website without revealing any personal information. With every visit on the website, the web server stores automatically only a so-called server log file which contains e.g. the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), and documents the request.

These access data are analysed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves according to art. 6 (1) 1 lit f GDPR the protection of our legitimate interests in the proper presentation of our offer that are overriding in the process of balancing of interests. All access data are deleted no later than seven days after the end of your visit on our website.

Third-party hosting services
Data are also processed by a third-party provider that we have engaged to render hosting and website presentation services on our behalf. This provider processes on its servers all data that are collected in the manner specified below when you visit our website or fill in forms made available for this purpose in our online shop. Data are processed on other servers only in the scope described herein.

This service provider is based in an EU or EEA member state.

2. Data collection and use for processing the contract and for opening a customer account

We collect personal data that you voluntarily submit to us when you place an order, contact us (e.g. via contact form or by email) or open a customer account with us. Mandatory fields are marked as such because we absolutely need those data to perform the contract or process your contact request or open your customer account, and you would otherwise not be able to complete your order and/or create your customer account or send the contact request. It is evident in each input form what data are collected. We use the data that you disclose to us to perform the contract and process your enquiries according to art. 6 (1) 1 lit b GDPR. Upon completion of the contract or deletion of your customer account, any further processing of your data will be restricted, and your data will be deleted upon expiry of the retention period applicable under relevant regulations, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by law, of which we inform you in this notice. Your customer account can be deleted at any time. For this purpose you can either send a message to the contact option specified below or use the relevant function available in the customer account.

3. Transfer of data

We disclose your data to the shipping company in the scope required for the delivery of the ordered goods according to art. 6 (1) 1 lit. b GDPR. Depending on the payment service provider you have selected during the ordering process, we disclose the payment details collected for order processing purposes to the bank commissioned to handle the payment and, as the case may be, to the payment service provider commissioned by us or to the selected payment service. Some of those data are collected by the selected payment service providers themselves if you open an account with them. In such a case, during the ordering process, you must register with your payment service provider using your access data. In this respect, the privacy notice of the relevant payment service provider applies.

4. Cookies

To improve the user experience on our website and enable you to use its certain features in order to show suitable products or conduct market research, some pages of this website use the so-called cookies. This serves the protection of our legitimate interests in the optimised presentation of our offer according to art. 6 (1) 1 lit a GDPR that are overriding in the process of balancing of interests. A cookie is a small text file which is stored automatically on your end device. Some of the cookies we use are deleted after you close the browser session, i.e. when you close the browser (that’s the so-called session cookies). Other cookies are stored in your end-user device and enable us to recognise your browser when you visit us again (persistent cookies). To check the cookie storage period, you can use the Overview function in the cookie settings of your web browser. You can configure your browser for it to inform you whenever a page uses cookies and decide on a case-by-case basis whether to accept or reject the cookies on a given website or generally. Every browser has a different policy for managing the cookie settings. The browser’s policy is described in the Help menu of every browser and explains how you can change your cookie settings. To find out how to change the settings in your browser, see the links below:
Internet Explorer™: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/kb/PH21411?locale=de_DE&viewlocale=en_US
Chrome™: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera™ : http://help.opera.com/Windows/10.20/en/cookies.html

Please note that disabling cookies may limit your access to some features of our website.

5. Google Maps

We use the “Google Maps” service on our website, an online map service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). This allows us to show you interactive maps directly on the website, allowing you to conveniently use the map feature.
By visiting our website, Google receives the information that you have accessed the corresponding subpage of our website. Furthermore, data from our website will be transmitted to Google. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you have to log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of their website. Such an evaluation is done in particular (even for non-logged in users) to provide needs-based advertising and to inform other users about your activities on our website. You have a right to object to the creation of these user profiles, and you must contact Google for this.
For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights and settings options for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal information in the US and has submitted to the Privacy Shield Agreement between the European Union and the United States. You can find further information in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

6. Applicants

If you apply to our company, we will process the information you voluntarily provide that we need in the context of the candidate selection process. In addition to your master data (e.g. name, company, addresses), contact data (e.g. e-mail, telephone numbers) and address data (e.g. place of residence, country, street), all data related to the application (e.g. curriculum vitae, certificates, qualifications, past employment, answers to questions, etc.) as well as possibly the correspondence with you during the selection process. We need this information for the purpose of matching your application with the requirements of the vacancy within the selection process. Without this data we will regularly be unable to process your application documents and to consider them in the application process. The legal basis for the processing of your personal data is § 26 BDSG i.V.m. Art. 88 DSGVO. In case there is no legal retention period, the data will be deleted as soon as the purpose of processing is expired and storage is no longer required. If not hired, this will be the case at least six months after completing the application process. Your personal data may be transmitted by us to third parties, provided that there is a legal basis for the data processing. In addition, we can pass on your data to external service providers (e.g. IT support service providers or data centers) as part of order-oriented order processing. Data processing outside the EU or the EEA does not take place.

7. Contact possibilities and your rights

You are entitled to obtain free-of-charge information concerning data stored about your person and, as the case may be, to correct, restrict the processing, enable the portability of, or delete those data:

  • Right to information, Art. 15 GDPR
  • Right to rectification, Art. 16 GDPR
  • Right to erasure (“Right to be forgotten”), Art. 17 GDPR
  • Right to restriction of processing, Art. 18 GDPR
  • Right to data portability, Art. 20 GDPR
  • Right to object, Art. 21 GDPR.

If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, block or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact our in-house data protection officer
Matthias Herkert
Byk-Gulden-Straße 2 // F22
78467 Konstanz
datenschutzbeauftragter@bedifol.com

You may also submit a complaint to the responsible data protection supervisory authority.

Responsible within the meaning of GDPR:
Bedifol GmbH
Byk-Gulden-Straße 2 // F22
78467 Konstanz
Phone: +49 (7531) 12738 10
Fax: +49 (7531) 12738 98
Email: info@bedifol.com

Right to object
If we process personal data as described above to protect our legitimate interests that are overriding in the process of balancing of interests, you may object to such data processing with future effect. If your data are processed for direct marketing purposes, you may exercise this right at any time as described above. If your data are processed for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for such purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

This does not apply to the processing of personal data for direct marketing purposes. In such a case we will no longer process your personal data for such purposes.