Data Privacy

We are pleased to welcome you to our Web pages. You can find information below about how your data are handled under Article 13 of the data protection regulations (GDPR).

Person responsible

The person holding the job shown in the Legal Notice is responsible for the data acquisition and processing referred to below.

Data security

We have taken technical and organizational steps to protect your data as fully as possible from unauthorized access. We currently implement an encryption method on our pages. In the future your data will be transmitted from your computer to our server and back on the Internet via TLS encryption. You can see this from the fact that in the status bar of your browser, the padlock icon is closed and the address line starts with https://.

Data transmission to third parties

Within the framework of job processing under Article 28 of the data protection regulations, we transmit your data to service providers who help us to manage our Web pages (e.g. e-connect) and execute the corresponding processes. Our service providers are under our strict instructions and they are bound by contract accordingly. Moreover, we have signed contracts with Google Inc., Microsoft, Dropbox and Mailchimp, covering job processing under Article 28 of the data protection regulations. Under the contracts, all the information provided can only be used for carefully defined specific purposes.

Data transmission to other countries

In some cases, we transmit personal data to another country outside the EU. Here, we always take care to ensure an appropriate level of data protection:

In the case of Google Analytics (USA) and Microsoft (USA), an appropriate level of data protection is ensured via their corresponding participation in the Privacy Shield Convention (Article 45, Section 1 of the data protection regulations).

Cookies

We use cookies on our Web pages. Cookies are small text files that are stored on your terminal and can be read. A distinction can be made between session cookies, which are deleted when you close your browser, and permanent cookies, which are stored after the individual sessions have been closed. Cookies can contain data that enable recognition of the terminal used. In some cases, however, cookies only contain information for specific settings that does not constitute personal data.

We use [session cookies and permanent cookies] on our Web pages. Their processing is carried out in compliance with Article 6, Section 1, Paragraph f of the data protection regulations and with a view to optimizing or enabling user guidance and adapting the presentation of our Web site.

You can set your browser so that it informs you about placing of cookies. This makes use of cookies transparent for you. Moreover, you can delete cookies at any time via the corresponding browser setting and block placing of new cookies. We would like to point out that in that case, our Web pages may not be displayed optimally, and certain technical functions may no longer be available.

Google Analytics

To ensure appropriate design of our Website, we create pseudonymous user profiles with the help of Google Analytics. Google Analytics uses cookies that are stored on your terminal and can be read by us. This enables us to recognise repeat visitors and count them as such. The data processing is carried out in compliance with Article 6, Section 1, Paragraph f of the data protection regulations or § 15 Section 3 of the German Telemedia Law, and with a view to finding out how often our Web pages are called up by various users.

The information generated by the cookie concerning your use of this Web site is usually transmitted to a Google server in the USA and stored there. As we have activated IP anonymization on this Web site, your IP address is truncated beforehand by Google within the Member States of the European Union. Only in exceptional cases is the full IP address transmitted to a Google server in the USA (an appropriate level of data protection is provided under Article 45, Section 1 of the data protection regulations, via Google’s participation in the Privacy Shield) and truncated there. Furthermore, we have signed a contract with Google Inc. (USA) covering job processing under Article 28 of the data protection regulations. Under the contract, Google uses all such information solely for carefully defined specific purposes, in order to assess use of our Web site for us and compile reports on Web site activities.

You can inhibit processing at any time. To do so, please use one of the following possibilities:

  • You can inhibit storage of cookies by selecting a corresponding setting in your browser software; however, we would like to point out to you that in that case, you may not be able to use all the functions provided by this Web site in full.
  • Moreover, you can inhibit acquisition by Google of the data generated by the cookie and concerning your use of the Web site (including your IP address), together with processing of that data by Google, by downloading and installing the browser plug-in available via the following link: (Google Tools).

Remarketing

In our Web pages, we can insert keywords that are linked to statements about the contents of the Web site, such as products on offer. Google receives the keywords, which do not contain any personal data or sensitive information. If you visit a page that features specific keywords linked to products, Google stores the information and allocates it to your pseudonymous recognition features. The link enables Google to determine whether our advertisements are displayed to you, and if so, which ones.

Cross Device Marketing

Google can link pseudonymous features, e.g. those of your terminals such as tablets, smartphones and mailboxes, with one another technically (Cross Device Marketing). This presupposes that you have come to an understanding with Google in the past concerning such data processing. This enables Google to execute targeted advertising campaigns via various terminals.

Your data are transmitted to Google and stored in the USA. An appropriate level of data protection is provided under Article 45, Section 1 of the data protection regulations, via Google’s participation in the Privacy Shield. Moreover, we have signed a contract with Google Inc. (USA) covering job processing under Article 28 of the data protection regulations. Under the contract, Google uses all such information solely for carefully defined specific purposes, in order to assess use of our Web site for us and compile reports on Web site activities.

Objection rights

You can object to Retargeting at any time under Article 21 of the data protection regulations. To do so, please contact marketing@bk-factory.eu

Your user rights

The data protection regulations entitle you, as a Web site user, to specific rights regarding processing of your personal data:

  1. Access rights (Article 15 of the data protection regulations):

You are entitled to demand confirmation as to whether your personal data are processed; if that is the case, you are entitled to access such personal data and the information listed in detail in Article 15 of the data protection regulations.

  1. Correction and deletion rights (Articles 16 and 17 of the data protection regulations):

You are entitled to demand immediate correction of any inaccurate personal data concerning you, and where applicable, completion of any incomplete personal data. Moreover, you are also entitled to demand immediate deletion of personal data concerning you, to the extent that one of the grounds set out in detail in Article 17 of the data protection regulations is applicable, e.g. if the data are no longer necessary for the purposes sought.

  1. Right to restrict processing (Article 18 of the data protection regulations):

You are entitled to demand restriction of processing if one of the prerequisites set out in Article 18 of the data protection regulations is met, e.g. if you have objected to such processing for the duration of any such verification.

  1. Right to data transferability (Article 20 of the data protection regulations):

In certain cases that are set out in detail in Article 20 of the data protection regulations, you are entitled to obtain personal data concerning you in a structured, common, machine-readable format, or require forwarding of such data to a third party.

  1. Right to object (Article 21 of the data protection regulations):

If data are collected under Article 6, Section 1, Paragraph f (data processing to safeguard justified interests), you are entitled, on grounds stemming from your specific situation, to object at any time to such processing. We then stop processing the personal data, unless there are demonstrable overriding legitimate grounds for such processing, which outweigh the interests, rights and liberties of the person concerned, or if processing serves the establishment, exercise or defence of legal claims.

  1. Right of appeal to a supervisory authority

Under Article 77 of the data protection regulations, you are entitled to appeal to a supervisory authority if you consider that processing of data concerning you infringes on provisions covering data protection rights. In particular, such right of appeal can be exercised before a supervisory authority in the Member State in which you reside or work, or in that of the location of the supposed infringement.

If you have any questions regarding your rights, please contact us via dsgvo@bk-factory.eu.

Contact forms

You can contact us using various Web forms (e.g. requests for proposals, simulator). For use of our contact form, we need your name and your email address. You can provide other details, but they are not mandatory.

The legal basis for processing is Article 6, Section 1, Paragraph f of the data protection regulations. Your data are only processed to answer your query. They are not passed on to any third parties.

Newsletter

We suggest that you could order our Newsletter on our Web site. If you have given us separate consent confirming that we can keep you informed by email about proprietary products and services, corresponding processing is carried out under Article 6, Section 1, Paragraph a of the data protection regulations, but this too is subject to your consent. You can withdraw your consent at any time, without such withdrawal affecting the legitimacy of the processing carried out beforehand. If such consent is withdrawn, we stop the corresponding data processing.

If you do not want to receive any more Newsletters in the future, you can cancel your subscription at any time, e.g. by sending an email to marketing@bk-factory.eu or via the Newsletter subscription cancellation link that you can find in each Newsletter email.

Job application documents

You can send us your job application documents directly to jobs@bk-factory.eu. We process your personal data in accordance with the data protection regulations in force under § 26 of the German Federal data protection law. We process the data that you forward to us within the framework of your application solely for the purposes of selection of applicants. No data processing is carried out for other purposes.

You yourself determine the scope of the data that you see fit to forward to us within the framework of your job application. The documents are handed over to our personnel department and processed there as quickly as possible. As a rule, job applications are passed on to the heads of the relevant technical departments in our Company. No further transferral of your data occurs. Your details are dealt with on a confidential basis in our Company. In the event of an unsuccessful application, your documents are deleted on expiry of a six-month period.

If we are also allowed to take your application into consideration for other or future job advertisements, we request a comment to that effect on the application. We then process your data in accordance with Article 6, Section 1, Paragraph a of the data protection regulations.

Social Media Plug-ins

On grounds of data protection, we do not integrate any social plug-ins directly in our Web presence. This means that when you call up our pages, no data are transmitted to social media services such as Facebook, Twitter, XING or Google+. Profiling by third parties is hence excluded.