Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.

1. Access data and hosting

You may visit our website without revealing any personal information. With every visit on the website, the web server stores automatically only a so-called server log file which contains e.g. the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), and documents the request.

These access data are analysed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves according to art. 6 (1) 1 lit f GDPR the protection of our legitimate interests in the proper presentation of our offer that are overriding in the process of balancing of interests. All access data are deleted no later than seven days after the end of your visit on our website.

Third-party hosting services
Data are also processed by a third-party provider that we have engaged to render hosting and website presentation services on our behalf. This provider processes on its servers all data that are collected in the manner specified below when you visit our website or fill in forms made available for this purpose in our online shop. Data are processed on other servers only in the scope described herein.

This service provider is based in an EU or EEA member state.

2. Data collection and use for processing the contract and for opening a customer account

We collect personal data that you voluntarily submit to us when you place an order, contact us (e.g. via contact form or by email) or open a customer account with us. Mandatory fields are marked as such because we absolutely need those data to perform the contract or process your contact request or open your customer account, and you would otherwise not be able to complete your order and/or create your customer account or send the contact request. It is evident in each input form what data are collected. We use the data that you disclose to us to perform the contract and process your enquiries according to art. 6 (1) 1 lit b GDPR. Upon completion of the contract or deletion of your customer account, any further processing of your data will be restricted, and your data will be deleted upon expiry of the retention period applicable under relevant regulations, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by law, of which we inform you in this notice. Your customer account can be deleted at any time. For this purpose you can either send a message to the contact option specified below or use the relevant function available in the customer account.

3. Transfer of data

We disclose your data to the shipping company in the scope required for the delivery of the ordered goods according to art. 6 (1) 1 lit. b GDPR. Depending on the payment service provider you have selected during the ordering process, we disclose the payment details collected for order processing purposes to the bank commissioned to handle the payment and, as the case may be, to the payment service provider commissioned by us or to the selected payment service. Some of those data are collected by the selected payment service providers themselves if you open an account with them. In such a case, during the ordering process, you must register with your payment service provider using your access data. In this respect, the privacy notice of the relevant payment service provider applies.

4. Cookies

To improve the user experience on our website and enable you to use its certain features in order to show suitable products or conduct market research, some pages of this website use the so-called cookies. This serves the protection of our legitimate interests in the optimised presentation of our offer according to art. 6 (1) 1 lit a GDPR that are overriding in the process of balancing of interests. A cookie is a small text file which is stored automatically on your end device. Some of the cookies we use are deleted after you close the browser session, i.e. when you close the browser (that’s the so-called session cookies). Other cookies are stored in your end-user device and enable us to recognise your browser when you visit us again (persistent cookies). To check the cookie storage period, you can use the Overview function in the cookie settings of your web browser. You can configure your browser for it to inform you whenever a page uses cookies and decide on a case-by-case basis whether to accept or reject the cookies on a given website or generally. Every browser has a different policy for managing the cookie settings. The browser’s policy is described in the Help menu of every browser and explains how you can change your cookie settings. To find out how to change the settings in your browser, see the links below:
Internet Explorer™: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/kb/PH21411?locale=de_DE&viewlocale=en_US
Chrome™: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera™ : http://help.opera.com/Windows/10.20/en/cookies.html

Please note that disabling cookies may limit your access to some features of our website.

Using of Google (Universal) Analytics for web analytics
For the purpose of website analytics, this website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.com). This serves the protection of our legitimate interests in the optimised presentation of our offer according to art. 6 (1) 1 lit f GDPR that are overriding in the process of balancing of interests. Google (Universal) Analytics uses methods, like e.g. cookies, that enable an analysis of your use of the website. The information collected automatically by cookies about your use of this website are as a rule transmitted to and stored on a Google server in the United States. At the same time, as IP anonymisation is enabled on this website, the IP address will be shortened before being transmitted within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be sent to a Google server in the USA and shortened there. Generally, Google does not associate the anonymised IP address, transmitted from your browser through Google Analytics, with any other data held by Google. User-related data is automatically deleted after 14 months.

Google LLC is headquartered in the USA and is certified to the EU-US-Privacy Shield. You will see the up-to-date certificate here. Based on this agreement between the USA and the European Commission, the latter has recognised entities certified to the Privacy Shield as those ensuring an adequate level of data protection.

You may prevent the data generated by cookies and related to your use of the website (incl. your IP address) from being recorded and processed by Google by downloading and installing the browser plugin available through the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively to the browser plugin, you may click the following link to deactivate Google Analytics and prevent Google Analytics from recording your data on this website in the future. In this process, an opt-out cookie will be stored on your end-user device. If you clear your cookies, you will have to click the link again.
Deactivate Google Analytics

5. Google Maps

We use the “Google Maps” service on our website, an online map service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). This allows us to show you interactive maps directly on the website, allowing you to conveniently use the map feature.
By visiting our website, Google receives the information that you have accessed the corresponding subpage of our website. Furthermore, data from our website will be transmitted to Google. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you have to log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of their website. Such an evaluation is done in particular (even for non-logged in users) to provide needs-based advertising and to inform other users about your activities on our website. You have a right to object to the creation of these user profiles, and you must contact Google for this.
For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights and settings options for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal information in the US and has submitted to the Privacy Shield Agreement between the European Union and the United States. You can find further information in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

6. Applicants

If you apply to our company, we will process your personal data, which we need for the decision on the establishment of an employment relationship or which we are legally obliged to process. In addition to your master data (e.g. name, company, addresses), contact data (e.g. e-mail, telephone numbers) and address data (e.g. place of residence, country, street), relevant personal data can be all data related to the application (e.g. curriculum vitae, certificates, qualifications, past employment, answers to questions, etc.) as well as possibly the correspondence with you during the selection process. Without this data, we will regularly be unable to process your application documents and to consider them in the application process. Within our company, those persons who need your data as part of the selection process or to fulfil legal obligations will have access to it. Your personal data may be transmitted by us to third parties, provided that there is a legal basis for the data processing. Data processing outside the EU or the EEA does not take place. We process your personal data, which we receive from you as part of the application process and, to the extent necessary for assessing your suitability for the position to be filled, which we have obtained and are permitted to process on publicly accessible sources (e.g. job-oriented social networks, Internet). The legal basis for the processing of your personal data is § 26 BDSG i.V.m. Art. 88 DSGVO, insofar as we need the data to fulfil the legal obligations to which we are subject. The data processed during the selection procedure will be deleted at the latest four months after the end of the selection process if no recruitment takes place, otherwise with the loss of the legal obligation as well as after expiry of any resulting claiming periods.

7. Contact possibilities and your rights

You are entitled to obtain free-of-charge information concerning data stored about your person and, as the case may be, to correct, restrict the processing, enable the portability of, or delete those data:

  • Right to information, Art. 15 GDPR
  • Right to rectification, Art. 16 GDPR
  • Right to erasure (“Right to be forgotten”), Art. 17 GDPR
  • Right to restriction of processing, Art. 18 GDPR
  • Right to data portability, Art. 20 GDPR
  • Right to object, Art. 21 GDPR.

If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, block or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact our in-house data protection officer
Matthias Herkert
Byk-Gulden-Straße 2 // 12
78467 Konstanz
datenschutzbeauftragter@bedifol.com

You may also submit a complaint to the responsible data protection supervisory authority.

Responsible within the meaning of GDPR:
Bedifol GmbH
Byk-Gulden-Straße 2 // 12
78467 Konstanz
Phone: +49 (7531) 12738 10
Fax: +49 (7531) 12738 98
Email: info@bedifol.com

Right to object
If we process personal data as described above to protect our legitimate interests that are overriding in the process of balancing of interests, you may object to such data processing with future effect. If your data are processed for direct marketing purposes, you may exercise this right at any time as described above. If your data are processed for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for such purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

This does not apply to the processing of personal data for direct marketing purposes. In such a case we will no longer process your personal data for such purposes.