PRIVACY POLICY

With this data protection declaration, we would like to inform you about the details of data collection and processing, as well as the rights to which you have
law in this context.
1. Name and address of the responsible person.
Bramex e.K.
Koenigstr. 10C
70173 Stuttgart
Germany
Tel: 0049 171 5088078
Email: info@bramex.de
2. Basic information on the processing of personal data.
Personal data is all information that relates to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered to be
identifiable if it can be identified directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, a
online identifier or one or more special characteristics, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
Bramex e.K. generally processes personal data only if the user consents to it or the data processing is permitted by law. The legal basis is Article 6 (1) of the
EU General Data Protection Regulation (GDPR). According to this provision, the processing of personal data is only permitted if the data subject consents.
(Art. 6 Para. 1 on a GDPR) or the processing is necessary for one of the following purposes:
– To fulfill a contract with the interested party or to carry out pre-contractual measures at the request of the interested party (Art. 6, paragraph 1 b, RGPD).
– To comply with a legal obligation of our company (Art. 6 Para. 1 lit. c GDPR).
– To protect the vital interests of the data subject or another natural person (Article 6 (1) (d) GDPR).
– To perform a task that is in the public interest or that has been entrusted to our company by the public administration (Art. 6 Para. 1 lit. e GDPR).
– To safeguard a legitimate interest of our company or of a third party, provided that the interests, rights and fundamental freedoms of the interested party do not prevail for the
protection of personal data (Article 6 (1) (f) GDPR).
3. Duration of data storage and deletion.
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also be carried out if
That’s how it’s stablished by the law. The data will also be blocked or deleted if a storage period prescribed by the aforementioned regulations expires, unless a
further storage of data for the conclusion or performance of a contract. Prescribed storage periods in this sense are, for example, retention periods
under tax or trade law.
4. Acquisition of access data (creation of log files)
The Bramex website automatically collects data and general information from the computer system of the computer making the call, which is stored in the files of
server log. The following data and information are recorded:
– Type of browser, including the version used
– Operating system used by the calling computer
– Date and time of the call
– IP address of the user
– Internet service provider of the user
– Website from which our website is accessed
– Websites and sub-websites accessed from our website
– Other similar data and information used to prevent threats from attacking our system
The data is stored anonymously in the log files of our system. There is no link to other personal data of the user, Bramex does not draw any conclusions
about the person in question.
The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. The storage is necessary to ensure the functionality of our website and the presentation
content correct. In addition, the data serves our statistics and the constant optimization of our content. Finally, there is a storage to provide the
law enforcement authorities the information necessary for law enforcement in the event of a cyber attack.
The data will not be passed on to third parties unless there is a legal disclosure obligation.
Since the collection and storage of data in log files is absolutely necessary for the smooth operation of the website, there is no possibility
that the user objects.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. To the extent that the survey was conducted to ensure that the site
web is functionally available, this is the case when the Internet session ends.

5. Registration on our website
You have the option to register as a user on our website. You enter the data in an input mask, transmit it to us and save it. The input mask shows what
personal data is affected by this. In addition, your IP address and the date and time of registration will also be saved. At the end of the registration process, we again get the
User consent for data processing. Therefore, the legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR. In regards to
storage of the IP address, the legal basis is also Art. 6 Para. 1 lit. f GDPR. The data will not be passed on to third parties unless there is a legal disclosure obligation.
The registration of the data subject with the voluntary provision of personal data serves the data controller to offer the content or services of the data subject which, due to the
nature of the matter, they can only be offered to registered users. The other data is stored to prevent or detect the misuse of the website and to guarantee the security of
our system.
As a registered user, you have the option at any time to change or completely delete the personal data provided during registration. To do this, you can
use the functions contained in your account or inform us of your wish to change or delete the data in writing or by email.
6. Contact form and email contact
The Bramex website has a contact form, which can be used to contact our company electronically. The data entered by the user in the mask of
input are transmitted to us and stored. In addition, the IP address of the user and the date and time of transmission are also saved. The user’s consent is obtained for the
data processing as part of the submission process. Therefore, the legal basis for the processing is Art. 6 Para. 1 lit. a GDPR. Regarding the storage of
IP address, the legal basis is also Art. 6 Para. 1 lit. f GDPR.
The data subject has the option at any time to withdraw consent to data processing or to object to the use of data. In this case, the intended contact with the
user is no longer possible or a communication that has already started cannot be continued.
Alternatively, you can contact us using the email address listed on our website. In this case, the personal data that the user lists in the email
email will be transmitted in addition to the email address. The legal basis is Art. 6 Para. 1 lit. f GDPR.
The processing of the data transmitted via the contact form or by email only serves to establish the desired contact. The other data is stored for
prevent or detect misuse of the website and to ensure the security of our system. The data will not be passed on to third parties unless there is a legal obligation to do so.
divulgation.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. With regard to the data transmitted by the user in the
contact form or in the email, this is the case when the relevant communication ends, unless the content of the communication is still of relevance
legit after that.
7. Use of social plugins
We have integrated social media plugins on our website. If the person concerned is registered with the respective social network when accessing our website and also
logs in, this recognizes which specific subpage of our website the person in question is accessing. The operator of the social network collects this information and assigns it to the
account of the person there. We have no influence on the type and scope of the data collected, stored and processed by the operator of the social network. to get more
information, please contact the relevant social network operator.
In order to prevent the operator of the respective social network from processing data about you, you must log out of the respective network before accessing our website. Also, you can
use special tools that block data transmission (for example, Facebook Blocker).
We have integrated the social media plug-ins of the following companies on our website:
Facebook Inc. https://de-de.facebook.com/about/privacy/
Google Plus / Google Inc. (Google+) https://www.google.de/intl/de/policies/privacy/
WhatsApp https://www.whatsapp.com/legal/?l=de
XING AG https://www.xing.com/privacy
LinkedIn Corporation https://www.linkedin.com/legal/cookie-policy

8. Use of Google Analytics
We use the Google Analytics analysis service on our website. Google Analytics stores cookies on your computer and thus enables an analysis of your use of the website. The
Information generated by the cookie, including your IP address, is generally transferred to a Google server in the US and stored there. However, the transmitted data is
anonymized beforehand. On our behalf, Google will statistically evaluate the transmitted information in order to compile reports on website activity and to
provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not
will be merged with other Google data.
To prevent this, you can disable or restrict the transmission of cookies in your Internet browser settings. You can delete cookies that have already been saved in any
moment.
However, if cookies are disabled for our website, it may not be possible to use all functions of the website to their full extent.
10. Third party content and services in the application and use of YouTube
Our website also contains content and services from third parties, e.g. YouTube videos or Google Maps maps. When you call this content/services through our site
web, your IP address is usually passed on to the respective third-party provider. This allows these third party providers to process your user IP address. Even if we
we strive to include only those third party providers that only use IP addresses to deliver the content, we have no influence on how the affected third party provider uses
the received data. For more information, please contact the relevant third-party provider.
11. Your rights as a data subject
If you process personal data, you are the data subject within the meaning of the GDPR and you have the following rights against us as the data controller:
a) Right to confirmation and information
You can request confirmation from us at any time as to whether we will process personal data concerning you. If this is the case, you have the right to be told about the
following circumstances:
the categories of personal data that are processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the expected duration of storage of your personal data or, if specific information is not possible, the criteria for determining the storage period;
the existence of a right to correction or deletion of your personal data, a right to restriction of processing by the person responsible or a right to
object to this processing;
the right to lodge a complaint with a supervisory authority;
all available information about the origin of the data if the personal data is not collected from the data subject;
The existence of automated decision-making, including profiling, in accordance with article 22, paragraphs 1 and 4 of the GDPR and, at least in these cases,
meaningful information about the logic involved and the intended scope and effects of such processing for the data subject.
In addition, you have the right to information about whether the personal data is transferred to a country that is not a member of the EU (so-called third country) or to an international organization. In
this context, you can request the appropriate guarantees in accordance with Art. 46 GDPR to be informed in connection with the transmission.
b) Right to rectification
You have the right to ask us for an immediate correction regarding inaccurate personal data. You also have the right to request that we complete incomplete personal data,
including by means of a supplementary statement, taking into account the purposes of the processing.

c) Right to delete (right to be forgotten)
You can ask us to delete your personal data immediately if one of the following reasons applies:
The personal data concerning you is no longer necessary for the purposes for which it was collected or processed.
You withdraw your consent, on which the processing is based in accordance with Art. 6 para. 1 lit. ao Art. 9 Paragraph 2 lit. a GDPR was relied on and there is no other legal basis for the processing.
In accordance with Art. 21 para. 1 GDPR and there is no overriding legitimate reason for the processing, or you file an objection pursuant to Art. Art. 21, paragraph 2 of the
GDPR to object to processing.
The personal data concerning you was unlawfully processed.
The deletion of your personal data is necessary to comply with a legal obligation under Union law or the law of the member states to which the controller is subject.
The personal data concerning you was collected in connection with the information society services offered in accordance with article 8, paragraph 1, of the GDPR.
If Bramex has made personal data concerning you public and we are obliged to delete it in accordance with the above principles, we also have a duty to inform others
data controllers that you, as the data subject, will remove all links you have requested to this personal data or copies or replicas of this personal data.
In this sense, we take the appropriate measures, including technical ones, taking into account the available technology and implementation costs, in order to comply with these
obligations, at least insofar as processing is no longer necessary, i.e. legal requirements dictate this or legitimate interests prevent deletion.
d) Right to restriction of processing
You can request that we restrict the processing of your personal data under the following conditions:
The accuracy of the personal data will be contested for a period of time that allows the responsible person to verify the accuracy of the personal data.
The processing is unlawful and you request restriction instead of deletion.
e) Right to information
If you have asserted the right to correction, deletion or restriction of processing, we are obliged to inform all recipients to whom the data has been disclosed
concerning you about this correction or deletion of data or restriction of processing, unless this proves impossible or involves an effort
disproportionate. In this regard, you can ask us to be informed about these recipients.
f) Right to data portability (data portability)
You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another
unhindered controller of the controller to whom the personal data was provided, provided that the processing is based on consent in accordance with Article 6,
paragraph 1, letter a, GDPR or article 9, paragraph. 2 letters a GDPR or in a contract in accordance with Art. 6 Paragraph 1 letter b GDPR and the processing is carried out using procedures
automated, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to
the responsible person.
In addition, when exercising your right to data portability in accordance with Article 20, paragraph 1 of the GDPR, you can request that personal data be transferred directly from a
responsible person to another responsible person, insofar as this is technically feasible and if this does not imply the rights and freedoms of other persons. be affected.

g) Right to object
You have the right to object to the processing of your personal data at any time, for reasons arising from your particular situation, in accordance with Article 6 (1) (e) or (f)
GDPR. This also applies to profiles based on these provisions.
Bramex e.K. In the event of an objection, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the
interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data with the
purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58 / EC, you have the option to exercise your right to object in relation to the use of information society services using
automated procedures using technical specifications.
h) Right to withdraw consent under data protection law
If you have given your consent under data protection law, you have the right to withdraw this consent at any time with effect for the future.
i) Automated decisions in individual cases, including profiling
You have the right not to be subjected to a decision based solely on automated processing, including profiling, that has a legal effect on or affects you
Similarly, as long as the decision
is not required for the conclusion or execution of a contract between you and Bramex
o is permissible on the basis of the legal provisions of the Union or the member states to which the controller is subject and these legal provisions contain measures
appropriate to safeguard the rights and freedoms and legitimate interests of the interested party
or with the express consent of the interested party.
However, these decisions cannot be based on special categories of personal data according to article 9, paragraph 1 of the GDPR, unless article 9, paragraph 2, is
turn on a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
If the decision to conclude or fulfill a contract between the interested party and the data controller is necessary or if it is made with the express consent of the interested party, Bramex takes the
appropriate measures to protect the rights and freedoms and legitimate interests of the data subject. which includes at least the right to obtain the intervention of a person by
responsible person, to express their own position and to contest the decision.
j) Right to lodge a complaint with the supervisory authority
Irrespective of the rights we have, you also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your
residence, your place of work or the place of the alleged violation, if you believe that the processing of your personal data violates the GDPR.

×