Privacy

Subject-Matter of this Privacy Policy

We are happy about your interest in our website. The protection of your personal data (hereinafter in short “Data”) is a major and very important concern for us.
Accordingly, in this document, we would like to provide you with comprehensive information about which Data is collected when you visit our website and use our services available there, how this Data is processed or used by us, and which accompanying technical and organizational safeguards we have adopted in this respect.
 

Responsible Body / Service Provider

The responsible body is BUBACK TONTRÄGER GMBH, Rehhoffstr. 8a, D-20459 Hamburg, Germany. Questions or comments regarding this Data Protection Policy, or generally regarding data protection, can be addressed to the following email address: info@buback.de.
 

Server log-files

It is not necessary to enter personal data in order to use our website for mere information purposes.
Rather, in this case, we only collect and use your Data to the extent it is automatically transmitted by your web browser and stored by our provider (hosteurope.de) in server-log-files for 8 weeks. This includes in particular:

• date and time of the retrieval of one of our websites
• time and date of the retrieval of one of our internet pages
• your browser type
• the transmitted data volume and the access status (file transmitted, file not found etc.) as well as
• your anonymised IP address.

We only collect and use this data in non-personal form in case of a visit for information purposes. This is done in order to allow the retrieval and use of the web pages requested by you. For more information about how and why our provider creates those log-files please visit this page: https://www.hosteurope.de/AGB/Datenschutzerklaerung/ (german).



Use of cookies and plug-ins

We use cookie technology for our website. Cookies are small text files which are sent to your browser by our web server in the course of your visit to your web pages, and which are stored on your computer, tablet or smartphone for a later retrieval.
On our websites we use the following cookies:

[_ga] Function: Google Analytics Cookie. This cookie stores a unique identifier and is used to distinguish users. The cookie is saved for the duration of 2 years. The cookie is a so called First-Party cookie, which is controlled by our website.
[_gat] Function: Google Analytics and Remarketing cookie. This cookie does not store any user information. It is used to limit the number of requests that are made to the Google servers. The cookie is saved for the duration of 10 minutes. The cookie is a so called First-Party cookie, which is controlled by our website.
[laravel_session] and [XSRF-TOKEN] Function: Identification and security cookies. These cookies contain a unique user session string. They are used to provide a secured identification process for a user session. The cookies are saved for the duration of 2 hours. These cookies are so called First-Party cookies, which are controlled by our website.
Additional cookies can be placed by third parties using their plugins. Information about these cookies is provided at the respective subsection of this Privacy Policy as well as within the linked Privacy Policies of each third party.
Whether cookies can be placed or retrieved is up to you: you can control this via your browser settings. For example, you can wholly deactivate the storing of cookies in your browser, restrict it on certain websites or configure your browser in such a way that it notifies you automatically as soon as a cookie is to be placed, and requests your response thereto. For technical reasons, it is necessary that you allow the aforementioned session cookies in order to enjoy the full functionality of our website.
The legal basis for the analysis of user behavior with the cookies and plug-ins set out in this Section 6 is provided by Art. 6 (1) (f) GDPR, our legitimate interest is the demand-oriented design of our website.


a) Use of Google Analytics
This website might use Google Analytics, a web analytics service provided by Google, Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
IP-anonymization is activated on this website, so your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there.
Google will use this information on behalf of the operator of this website as a processor according to Art. 28 GDPR for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage.
The IP-address, that your Browser conveys within the scope of Google Analytics, will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also opt-out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Addon for your current web browser: https://tools.google.com/dlpage/gaoptout
As an alternative to the browser addon or for browsers on mobile devices, you can prevent being tracked by Google Analytics on this website by using an opt-out cookie. In order to do so you have to click this link. The opt-out cookie will be stored on your device, please note that you will have to click this link again, if you delete your cookies.
Further information is available within the privacy policy of Google which you can find here: https://www.google.com/policies/privacy/partners/?hl=en.


b) Use of Google Adwords and Remarketing
We may also use the Google Adwords Remarketing tool provided by Google on this website. With this we can display relevant ads to users of our website if they are visiting other websites within the Google advertising network. The ads shown are based on past visits of our and other websites and by doing so try to cater to your interests. To analyze what websites you are visiting, Google uses the so called DoubleClick remarketing pixels. A pixel is a small, invisible piece of code that is embedded in our website. Google also uses cookies, small text files, which are stored on your device to provide analysis of the use of our website. Within this file Google is storing a character string that captures anonymized data about your use of the website. Additional information about the use of cookies on our website is available in section 6 of this Privacy Policy. Google is also collecting information about what ads are displayed to you and what ads you clicked on.

Google will use this information as a contractually designated processor pursuant to Art. 28 GDPR to evaluate your use of the website after the advertisement has been clicked and to compile reports on these website activities.

You can adjust or prevent the use of Google Adwords by changing your Google Advertising settings here: https://www.google.com/settings/ads/
Alternatively you can prevent DoubleClick’s use of cookies by visiting the DoubleClick opt-out page at https://www.google.com/settings/ads/onweb#display_optout or the Network Advertising Initiative opt-out page at http://www.networkadvertising.org/managing/opt_out.asp
Additional information on Google Adwords and Remarketing is provided by Google here: http://www.google.com/privacy/ads/.


c) Use of Facebook Website Custom Audiences
This website may use Facebook "Website Custom Audiences" ("WCA") - for the purpose of pixel retargeting, with which we control which user groups within the Facebook network are targeted with our advertising. We receive no access to your Facebook account or to the content of the transferred data. If you want to prevent that your targeted advertising is displayed within Facebook, you can change the setting for your Facebook account via the following link: https://www.facebook.com/ads/website_custom_audiences/
Also you can disagree to the data acquisition via WCA alternatively using the browser setting of third-party cookies or you can turn off WCA easily via the following link (for permanent disabling your browser must accept cookies): Disable / Enable Facebook Website Custom Audiences.


d) Use of Technical Service Providers
We embed YouTube videos on our website. “YouTube” is the YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Where we embed YouTube videos, we are using the so-called “Privacy-enhanced mode”. YouTube will not store any information about your visit to pages on our site that have YouTube videos embedded unless you interact with such videos.
The legal basis is provided by Art. 6 (1) lit. f) GDPR. Our legitimate interest is to provide you with demand-oriented content.
By interacting with the videos, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, further data will be transmitted to servers operated by YouTube. If you’re logged in to your YouTube and/or Google account, YouTube may associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube and/or Google account before interacting with the YouTube videos embedded on our website. 
For more information about your rights and privacy settings please follow this link: https://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the United States and has submitted to the EU-US Privacy Shield Framework.


E-Mails

When you reach out to us via email we are processing the Data you provide us with. This may include your name, address, email address, phone according to your email signature. The legal basis is provided by Art. 6 (1) lit. b) GDPR when we are entering into or preparing a contractual relationship and/or Art. 6 (1) lit. f) GDPR where it is our legitimate interest to provide you with the information requested by you. Please note that we will be unable to enter into a contractual relationship when you are not providing the contractual data required. It is our legal obligation to store contractual information for ten years pursuant to applicable business and tax laws.


Data Security

In addition, we have implemented technical and organizational safeguards in order to protect incoming or collected personal data, in particular against accidental or willful manipulation, loss, destruction or against attacks by unauthorized persons. Our safeguards are continuously improved in accordance with technological progress.


Rights of Data Subjects

We do not use any methods of automated individual decision-making.
At any time, you have the right to request information about all your Data which we are processing. Furthermore, if your Data is incorrect or incomplete, you have the right to have it rectified and completed. You can also request the erasure of your Data at any time, unless we are legally obliged to continue processing your Data.
Where applicable legal requirements are met, you can request a restriction to the processing of your Data. You also have the right to object to the processing, insofar as the data processing is based on profiling or direct marketing purposes.
Where we process your Data on the basis of your consent or a contract, you have the right to transfer the Data provided by you, insofar as the rights and freedoms of others remain unaffected. Where we process your Data on the basis of a declaration of consent, you have the right to revoke such consent at any time with future effect. The processing carried out prior to a revocation remains unaffected by the revocation.
Where you believe that we process your Data in violation of the applicable law, you have the right to file a complaint with a data protection supervisory authority at any time.

June 2022