Data Protection
Responsible body and data security
Responsible body and data security
Responsible body
The body responsible for data processing on this website is:
Bulthaup GmbH & Co KG
Aich, Werkstraße 6
84155 Bodenkirchen
Telefon: +49 (0)8741 80 0
E-Mail: datenschutz@bulthaup.com
Data protection
This website uses TLS (transport layer security) encryption for security reasons and to protect the transfer of confidential information, such as orders or requests which you send to us as the site operator. An encrypted connection can be recognized when the browser’s address line changes from “http://” to “https://” and by the padlock symbol in the browser line.
Collection of data on our website
Collection of data on our website
Cookies
Cookies are used in some of this website. They do not harm your PC or contain any viruses. Cookies make our website easier to use and more effective and secure. They are small text files which are placed onto your computer and saved by your Internet browser.
Most of the cookies we use are so-called “session cookies”. They are used to optimize user-friendliness and automatically deleted after your visit. We also use temporary cookies to optimize user-friendliness, which remain on your computer until deleted. These cookies allow us to recognize your browser on your next visit.
We also use cookies to collect statistical data about the use of our website, which are then analyzed to optimize our services for you (see section 4).
Your browser settings include options to inform you when cookies are placed on your computer, to only allow cookies on an individual basis, to accept cookies in particular cases or generally reject cookies and to turn off automatic cookie deletion when you close your browser. Deactivating cookies may restrict the functionality of this website. Data processing via cookies is legally governed by Article 6 (1) (f) General Data Protection Regulation (GDPR).
Server log files
The site provider automatically collects and saves information in server log files, which your browser then automatically transfers to us. This information includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is processed to ensure you connect to the website seamlessly, can comfortably use our website, to analyze system security and stability and for other administrative purposes. This data will not be merged with other data sources.
This data processing is legally governed by Article 6 (1) (f) GDPR.
Contact forms
If you send a request to a bulthaup partner via the “contact form” page, we will transmit your request and the data notified with it to the bulthaup partner. This will be done only for the purposes stated in the declaration of consent.
The declaration of consent which you can provide in these forms (but do not have to) has the following content:
Consent regarding data protection legislation:
Data Privacy Notice:
I agree to my above request and the data notified with it being transmitted by Bulthaup GmbH & Co KG as controller to the bulthaup partner stated in the legal information and to them being stored and used by bulthaup and the relevant partner for the purposes of responding to my request by e-mail and of sending bulthaup product information and associated service offerings by post, as well as for market research purposes.
Please note: Without your consent, your request will not receive a response. The data provided in the contact form will be processed on the basis of your consent (Article 6 (1) lit. a GDPR). You can revoke your consent to the processing and use of your data for the specified purposes at any time. Please direct any revocation to Bulthaup GmbH & Co KG, FAO Data Protection, 84155 Aich, Germany or send an e-mail to datenschutz@bulthaup.com. We will inform the relevant partner of your revocation.
The data which you input in these contact forms will remain stored until you ask us to delete them or until you revoke your consent with regard to storage.
Social media
Social media
Sharing content via plug-ins (Facebook, Pinterest)
So-called “social plug-ins” are used on our website to raise awareness of our company pursuant to Article 6 (1) (f) GDPR. We currently use plug-ins from Facebook and Pinterest. Data, including personal data, may be sent via these plug-ins to service providers in the USA and potentially used by these service providers.
bulthaup does not collect any personal data via the social plug-ins or any personal data about the use of plug-ins. A program prevents data from being transmitted to the service provider in the USA without the user’s knowledge. This solution ensures that for the moment, no personal data is transferred to the provider of the social plug-in when you visit bulthaup’s websites. Data can only be transmitted to the service provider and stored there if you click on one of the social plug-ins.
Access by the service provider
The service provider then receives the information that you have accessed the corresponding sub-page of our website. This happens regardless of whether you have an account with the service provider and whether you are logged in. If you are logged in to the service provider this will be directly assigned to your account. If you click on one of the social plug-ins and, for example, link this website, the service provider will also store this information in your user account and publicly share this association.
If you do not wish this assignment to your profile with the service provider you must log out before clicking on one of the social plug-ins.
We have no influence over whether and to what extent the service provider collects personal data. The scope, purpose and storage period of the collected data is also unknown. It must be assumed that, at a minimum, the IP address and information related to the device used are collected and used. It is also possible that the service provider uses cookies.
Service providers’ details
More information about how the service providers deal with data protection can be found on their websites:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
https://www.facebook.com/policies
Further information about the collection of data
Analytical tools and advertising
Analytical tools and advertising
We use the following tracking measures pursuant to Article 6 (1) sentence 1 (f) GDPR. We aim to ensure these tracking measures support the needs-based design and continued optimization of our website. We also use tracking measures to collect statistical data about how our website is used, which is then analyzed to optimize our services for you.
The respective purpose of data processing and data categories are to be taken from the respective tracking tools.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is summarized in a user-ID and assigned to the respective end device of the website visitor.
Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
Browser plug-in You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
Google Analytics remarketing
Our websites also use the functions of Google Analytics remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.
This function enables advertising target groups created by Google Analytics remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. Accordingly, interest-related and personalized adverts are shown, which have been adapted in accordance with your previous usage behavior and surfing habits on one device (e.g. cellphone) and also shown on another of your devices (e.g. tablet or PC).
If you have provided the appropriate consent, Google will link your web and app browser histories with your Google account. This allows every device which you log in to with your Google account to have the same personalized adverts shown.
To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to your Google Analytics data to define and create target groups for cross-device advertising.
You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account. Please visit the following to do so: https://www.google.com/settings/ads/onweb/.
A potential summary of the data collected in your Google account is only carried out on the basis of your consent, which you can provide to or withdraw from Google (Article 6 (1) (a) GDPR).
More information and data protection information can be found in the Google Privacy Policy and Terms at: https://policies.google.com/technologies/ads?hl=en.
Matomo
This website uses the open source web analytics service Matomo.
With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which page views were made and from which region they came. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
IP anonymisation
We use IP anonymisation for the analysis with Matomo. This means that your IP address is shortened before analysis so that it can no longer be clearly assigned to you.
Cookieless analysis
We have configured Matomo in such a way that it does not save any cookies in your browser.
Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.
Meta pixel
Our website uses Meta pixel to measure the conversion rate of visitor actions of Meta Platforms Inc. (formerly Facebook Inc.), 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
The Meta pixel can keep track of website visitors after they have been forwarded to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future ads to be optimized.
The data collected is anonymous for us as the site operator, we cannot trace any data back to determine the identity of a user. The data will, however, be stored and processed in such a way as to enable a link to be established to your user profile and Facebook may use the data for its own advertising purposes, in accordance with the Facebook Data Policy. As a result, Facebook may be able to show adverts on your Facebook page as well as outside Facebook. We cannot influence how this data is used as the site operator.
More information about how Facebook protects your privacy can be found in the Privacy Policy of Facebook: https://www.facebook.com/about/privacy/.
You may also deactivate the “Custom Audiences” remarketing function in the adverts settings https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do so.
If you do not have a Facebook account, you may deactivate Facebook’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
Plugins and tools
Plugins and tools
Google Maps
This website uses an API from the map service Google Maps. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.
It is necessary to store your IP address to use the functions of Google Maps. This information is usually transmitted to Google’s server in the USA and stored there. The site operator has no influence over this transmission of data.
We use Google Maps to display our websites in an appealing manner and help customers find our locations stated on the website. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.
More information about how Google interacts with your user data can be found in Google’s Privacy Policy. https://www.google.de/intl/en/policies/privacy
Rights in accordance with the General Data Protection Regulation
Rights in accordance with the General Data Protection Regulation
In accordance with the EU General Data Protection Regulation, you have a right of access (Article 15), a right to rectification and erasure (Articles 16, 17), the right to restrict processing (Article 18) and a right to data portability (Article 20), as well as the right to lodge a complaint with a supervisory authority (Article 77).
If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, if justified due to reasons pertaining to your specific circumstances or if you are objecting to direct advertising. If you are objecting to advertising, you have a general right to object, which will be implemented by us without you having to provide details about your particular situation.
If you wish to exercise your right to withdraw your consent or object, it is sufficient to send an datenschutz@bulthaup.com.
Up-to-dateness of and changes to this Privacy Policy
Up-to-dateness of and changes to this Privacy Policy
This Privacy Policy is currently valid as of May 2018.
It may be necessary to make changes to this Privacy Policy due to further development of our website and services offered there, or on the basis of changes in legislation or to regulatory requirements.
© Copyright Bulthaup GmbH & Co KG, Bodenkirchen (Germany). All rights reserved.