We as the operator of the website at www.berotec.de (also or “Online Shop“) are responsible in the sense of the applicable data protection law, in particular the General Data Protection Regulation (“DSGVO”), for the personal data of the user (“you“) of this website.

In the following, we inform you clearly within the scope of our information obligations (Art. 13 ff. DSGVO) about which data is processed when you visit our website and on which legal basis this is done. You will also receive information on how we protect your data in technical and organisational terms and what rights you have vis-à-vis us and vis-à-vis the competent supervisory authority.

1. information on the person responsible

Berotec GmbH
Georg-Schlatter-Straße 10
75031 Eppingen

Phone: +49 7262-6168573
E Mail: contact[at]berotec.de

2. processing of your personal data

2.1. Informational use of our website
If you call up our website merely to visit it, so-called log files are compiled by being automatically recorded by our system.

The following log files are processed automatically:

• IP address of the requesting computer
• Type of internet browser used
• Language of the Internet browser used
• Version of the Internet browser used
• Operating system and its version
• Accessed pages
• Date and time of the visit
• Time zone difference from Greenwich Mean Time (GMT)
• Access status/https status code
• Amount of data transmitted
• Success or error of the loading process
• referrer

The log files contain your IP address and possibly other personal data. Therefore, an assignment to you is possible in principle. However, we store your data only temporarily and in particular not together with other personal data.

The processing of the above-mentioned data is necessary for the provision of our website. We also store the data for the purpose of the security of our information technology systems. In these
purposes, our legitimate interest is also justified in using the data on the legal basis Art. 6 (1) lit. f DSGVO to process.

The log files, which also contain your IP address, are anonymized after seven days by replacing the last octet with random numbers. Therefore, an assignment to you is no longer possible after anonymization and your data will not be stored together with other personal data.
information.

The processing of the above-mentioned data is necessary for the provision of our website.

Thelegal basis for processing the data for anonymization purposes is Art. 6 (1) lit. f DSGVO.

3. use of offers

3.1. Customer account
You have the possibility to create a customer account on our website with your personal data. This is voluntary and the data will not be passed on to third parties. If you decide to create a customer account, you must provide us with the following information:

• E-mail address

When you submit your registration, we store your IP address and the date and time of your registration together with the data you provide. By sending the registration you agree to the processing of your data by us.

Your data will be used for the purpose of managing your customer account and providing related functions, such as processing your customer data, and displaying your orders. The legal basis for the storage of your customer account data is Art. 6 (1) lit. a DSGVO.

We store your data, which you have made available to us in the context of your voluntary registration, as long as you do not delete your customer account with us. When you make changes to your information, the old information is deleted and only the updated information is stored. In addition to this data, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f DSGVO) to ensure the security of our systems and to counteract misuse. This additional data is deleted as soon as it is no longer required, at the latest when
the contract is settled with you.

You can delete or modify your voluntary customer account with us at any time. You will find the functions for changing your details or closing your account in your profile. After 14 months of inactivity of the customer account, we delete it together with your data. In addition, we only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c DSGVO). In this case, we block your data
insofar as it is only processed for the necessary purposes.

3.2. Orders
When you place an order on our website, we request the following data in order to fulfil the contract with you:

• First name, surname and (billing and delivery) address to send you your order and the invoice
• E-Post address to send you the order confirmation and provide you with contract documents immediately after the order.
• Your payment information to process the payment of your order Phone number (optional) to clarify queries
• Which motorcycle you ride (brand/model) (voluntary), serves for customer analysis and product improvement
• How did you find us? (voluntarily) to analyze our corporate presence

In order to send you your order, we pass on your address data to our shipping or logistics service provider for the purpose of delivery.

Legal basis
for the processing of the data Art. 6 (1) lit. b DSGVO. The data will be stored as long as it is necessary for the processing of the contract. In addition, we only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c DSGVO). In this case, we will block your data to the extent that it will only be processed for the necessary purposes.

In addition to this data, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f DSGVO) to ensure the security of our systems and to counteract misuse. This additional data is deleted as soon as it is no longer required, at the latest when the contract with you has been completed.

3.3 Payment methods
If you select a payment provider on our payment page, this provider will also receive your personal data, such as your name, address and bank account details. In addition, our house bank receives your bank connection data when an electronic payment is received.

PayPal: If you pay on our website with PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg), PayPal will receive your payment data for payment processing. The legal basis for data processing is Art. 6 (1) lit. b DS-GVO. You can find information on this under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#rAnnex

Credit card: We also process payments by credit card via the payment service provider Paypal . The payment service provider receives your personal data, for example your name, address and account details, for electronic payment processing. The legal basis for data processing is Art. 6 (1) lit. b DS-GVO. When you pay with your credit card on our website, your credit card provider receives the information that you have placed an order with us. Your credit card provider may run a credit check. You can find more information on this on the respective website of your credit card provider.

4. bonus promotion

If you purchase the “MOFESSOR chain lubricator” product from us and send us documentation of the installed chain lubricator in accordance with the terms and conditions of participation, we will process the following data from you in order to process the sending of the documentation and send you your free chain oil
…to the people of this country:

• First and last name
• Motorcycle model
• Address
• E-mail address

We do not publish your e-mail address or your address next to the documentation (“installation instructions”), but only your name and the motorcycle model, or at your request a pseudonym chosen by you.

Legal basis
for the processing of the data Art. 6 (1) lit. a DSGVO. The data will be stored as long as the documentation has been published on our website and we may need to reassign you to it. Beyond that we store your data only, in order to fulfill our contractual or legal obligations.
to fulfil obligations (e.g. tax obligations) (Art. 6 (1) lit. c DSGVO). In this case, we will block your data to the extent that it will only be processed for the necessary purposes.

5. contact form

You can contact us electronically via our contact form, for example to give us feedback or ask us questions. If you use this option, you transmit the following data to us:

• e-Mail address (so that we can contact you)
• First name and surname (optional)

In addition to the data that you voluntarily provide to us, we store the time (date and time) of transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f DSGVO) to ensure the security of our systems and to counteract misuse. This data, which we additionally collect during your contact, will be deleted after 12 months, beyond that at the latest when the matter of your contact has been comprehensively clarified.

By sending the contact form you agree to the processing of your data by us. The legal basis for the processing of your data for the purpose of handling your contact is Art. 6 (1) lit. a DSGVO. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the matter of your contact has been fully clarified.

If your contact aims to conclude a contract with us, the additional legal basis for the processing of your personal data is Art. 6 (1) lit. b DSGVO. This data is deleted after 12 months, and beyond that at the latest when the purpose of fulfilling the contract has been achieved. Furthermore, we only store your data in order to comply with contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c DSGVO).

6. contact by e-mail and telephone

You have the possibility to contact us by E-mail and telephone. Your personal data transmitted in this way will be stored by us. The data will not be passed on to third parties. The data will be processed exclusively to process your contact. The legal basis for the processing of your personal data is Art. 6 (1) lit. f DSGVO. The data is stored until it is no longer required to achieve the purpose of the conversation with you and the matter of your contact has been fully clarified.

If your contact aims to conclude a contract with us, the additional legal basis for the processing of your personal data is Art. 6 (1) lit. b DSGVO. These data are stored as long as they are necessary for the execution of the contract. Furthermore, we only store your data in order to comply with contractual or legal obligations (e.g. tax obligations) (Art. 6 (1) lit. c DSGVO).

In addition to the data that you voluntarily provide to us, we may also receive the time (date and time) of transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 (1) lit. f DSGVO) to ensure the security of our systems and to counteract misuse. This data, which we additionally collect during your contact, will be deleted as soon as it is no longer required, at the latest when the matter of your contact has been comprehensively clarified.

You can inform us at any time (see point 1 above) that you would like us to delete the data provided during the conversation. In this case all personal data of the conversation will be deleted and a continuation of the conversation is not possible.

7. cookies

Please note the following: You can make sure that no cookies are stored on your computer at all, or that the storage is only permitted to certain cookies. You can select this in your Internet browser settings. You can also view and delete the stored cookies there.

If you block all cookies, you may not be able to use all the features of our website.

We use cookies on our website. Cookies are text files that are sent to your browser by our web server when you visit our website and are stored on your computer for later retrieval. A cookie can therefore identify your Internet browser when you visit the website again. There are session cookies, which are those that delete themselves when you close the browser, and there are persistent cookies, which are stored on the hard drive until their preset expiration date is reached or until they are actively removed by you.

7.1. Own cookies
We use our own cookies to ensure the functionality and design of our website. Some elements of our website require that your internet browser is recognized after a page change.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.

Legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c DS-GVO and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to manage the cookies and similar technologies used and the related consents.

The provision of personal data is still contractually required and is also not necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal information, we will not be able to manage your consents.

For the processing of personal data in cookies, which we set on our website to ensure the functionality of our website and our offer, the legal basis Art. 6 (1) lit. f DSGVO.

We also use cookies, which are generally not necessary, but helpful to ensure the functionality of our website. In the overview you can see for which purposes your data is collected and for how long it is stored:

Name Cookie	Purpose of the cookie	Storage duration
cookie_notice_accepted	Saves the acceptance of the Cookies Notice	30 days
wpml_browser_redirect_test	Checks whether the browser accepts cookies	Until the end of the session
tk_ai	This is only used in the admin area and is used for general Analytics tracking.	5 years
tk_lr	Collection of internal metrics for user activity to improve the user experience.	1 year
tk_or	Collection of internal metrics for User activities to improve the user experience.	5 years
tk_qs	Collection of internal metrics for User activities to improve the user experience.	30 minutes
tk_r3d	Collection of internal metrics for User activities to improve the user experience.	3 days
tk_rl	Collection of internal metrics for User activities to improve the user experience.	1 second
tk_ro	This is only used in the admin area and is used for general Analytics tracking.	1 second
tk_tc	Collection of internal metrics for User activities to improve the user experience.	1 second
borlabs-cookie	This is where your consents are stored, that you gave when entering the website	1 year
_icl_visitor_lang_js	Saves the redirected language (web page is also in English). available, browser redirects automatically)	23 hours

Possibility of objection and removal
As stated in the introduction to this section, you can enable or restrict the transmission of cookies by changing the settings in your Internet browser. You can delete cookies that have already been saved by your Internet browser at any time. If cookies are restricted or disabled for our website, it may not be possible to use all functionalities.

7.2. Third-party cookies (third-party cookies)
We use cookies from so-called “third party providers” on our website. This means that when you visit our website, data from your web browser is transferred to the third party’s web server and stored there.

Google Analytics
The Google Analytics analysis service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: “Google Analytics“) is implemented on our website.

Google Analytics sets cookies that store the following information:

• Type of internet browser used
• Version of the internet browser
• The operating system you are using
• Referrer (previously visited website)
• Your shortened IP address
• Time of the server request

Name Cookie	Purpose of the cookie	Storage duration
_ga	Serves to distinguish of users in order to gather statistical data about the use of the website. generate.	2 years
_gat	Restricts the Request rate for Google Analytics	by Terminating the browser session
_gid	Serves for differentiation of users in order to obtain statistical data on the use of the Website to generate.	24 hours
ga-disable-UA-112027141-1	Serves for Deactivation of Google Analytics cookies	Runs automatically on 31.12.2099

We use the Google Analytics feature to anonymize your IP address before storing or processing it. As a rule, your IP address is still shortened within the European Union/EEA and only then transferred to Google servers in the USA. The processing of your information is pseudonymous and we will not merge it with other personal data about you.
make

We use the data collected in this way for statistical purposes in order to optimise our website and offers. The legal basis for this is Art. 6 (1) lit. f DSGVO.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link(https://tools.google.com/dlpage/gaoptout?hl=de).

You can either prevent the storage of Google cookies directly in your browser settings, or prevent the processing of your data by clicking on the following link and causing an “Opt-Out”: Deactivate Google Analytics . This sets an “opt-out cookie” that prevents your user data from being collected on this website.

You can find the privacy policy of Google under the following link: https://policies.google.com/privacy?hl=de.

8. social media

8.1. Icon links to social networks
On our website we use small icons, which refer to our web presence on third party platforms (Facebook, YouTube, Instagram). These are all hyperlinks, so noneof your data is automatically transferred, but only when you click on the icons and a new tab with the website of the third party provider opens in your browser.

8.2. Facebook fan page
We operate a fan page on the social media platformFacebook (Facebook Inc., Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, (hereinafter: “Facebook“), which we link on our company page via the Facebook icon. As long as you do not click on the link, Facebook will not receive any data from you. If you click on the link, for example to view our company presence on Facebook or to “like” our page, Facebook receives data from you (which data Facebook receives also depends on whether you are logged in to Facebook with your user profile while you click on the page or not).

While Facebook uses this data under its own responsibility to create profiles, among other things, we can only see aggregated data on our company homepage, i.e. statistics that no longer have any personal reference. These are called “page insights.” You can find more information about Page Insights at the following link:

https://de-de.facebook.com/legal/terms/information_about_page_insights_data

Due to the requirements of the DSGVO, we have entered into an agreement with Facebook provided by Facebook, which regulates the joint responsibility for our fan page. You can find this agreement in German under the following link:

https://www.facebook.com/legal/controller_addendum

It follows that Facebook is primarily responsible for aggregate Insight data. In addition, Facebook will comply with all obligations under the GDPR with respect to the processing of Insights Data (including Articles 12, 13 GDPR, Articles 15-22 GDPR and Articles 32-34 GDPR). If you send us a request regarding our Facebook fan page, we will inform Facebook in a timely manner. Facebook will answer the request according to our agreement.

Our legitimate interest in processing personal data lies in the use and linking of different communication channels. The processing is carried out on the legal basis of Art. 6 para. 1 lit. f DSGVO. Facebook’s data policy can be found at the following link: https://www.facebook.com/policy.php.

9th YouTube

We integrate videos from YouTube of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: “YouTube“) for the purpose of making our website more appealing. We use the extended data protection mode so that information about you is only shared with YouTube if you activate the video by clicking on the play button of the video.

When you activate the video, YouTube uses cookies to collect information for analysis purposes and to improve the user experience. According to YouTube, the data is processed pseudonymously. However, if you are logged into your Google or YouTube account, the data may be linked directly to your YouTube account.

For more information about privacy, including how long your data is stored on YouTube, please see Google’s privacy policy at https://policies.google.com/privacy?hl=de&gl=en.

Thelegal basis for the integration of the YouTube service on our website and the associated processing of your data is Art. 6 (1) lit. f DSGVO.

10. your rights

When we process your data, you are a “data subject” within the meaning of the DSGVO. You are entitled to the following rights: right of access, right to correction, right to restriction of processing, right to deletion, right to information and right to transferability of data. You also have a right of objection and a right of withdrawal and the right to complain to the supervisory authority.

Below you will find details on the individual rights:

10.1. Right of access to information
You have the right to ask us to confirm whether we are processing your personal data.

If we process your personal data, you have the right to obtain information about the following:

• the processing purposes
• the categories of personal data processed;
• the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
• if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration;
• the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing
  Processing;
• the existence of a right of appeal to a supervisory authority;
• if the personal data have not been collected directly from you, any available information on the origin of the data;
• the existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for you.

If we transfer your data to an international organisation or to a third country, you also have the right to request information as to whether appropriate safeguards are in place in accordance with data protection law. Art. 46 DSGVO exist in connection with the transfer.

10.2. Right of rectification
You have the right to correct and/or complete the data we have stored about you if this data is incorrect or incomplete. We will make the correction or completion without delay.

10.3. Right to limit processing
Under certain circumstances, you have the right to request us to limit the processing of your personal data. At least one of the following conditions must be met:

• You dispute the accuracy of the personal data for a period of time that allows us to verify the accuracy of the personal data,
• The processing is unlawful and you object to the erasure of the personal data and instead request the restriction of the use of the personal data;
• We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
• You have objected to the processing pursuant to Art. 21 (1) DSGVO as long as it has not yet been determined whether our legitimate grounds outweigh your interests.

10.4. Right of cancellation
You have the right to demand that we delete your personal data immediately if we are obliged to do so. This is the case if one of the following conditions is fulfilled:

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing is based pursuant to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21 (1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 (2) of the GDPR.
• Your personal data have been processed unlawfully.
• The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
• Your personal data has been collected in relation to information society services offered in accordance with Art. 8 (1) DSGVO.

If we have made your personal data public and we are obliged to erase it in accordance with the aforementioned conditions, we shall take reasonable measures, including technical measures, to inform other data controllers processing the personal data that you have requested erasure of all links to or copies or replications of such personal data, taking into account the technologies and implementation costs available to us.

However, your right to erasure does not apply if the processing is necessary for the following reasons (exceptions):

• To exercise the right to freedom of expression and information;
• to comply with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest.
  interest or in the exercise of official authority vested in us;
• for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i as well as Art. 9 (3) DSGVO;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, where the right referred to in (1) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
• for the assertion, exercise or defence of legal claims.

10.5. Right of information
If you have exercised your right to rectify, erase or restrict the processing of your data, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of processing of your data, unless this proves impossible or involves a disproportionate effort.

10.6. Right to data transferability
You have the right, subject to the following condition, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and the right to have this data transferred to another controller:

• The processing is based on consent pursuant to Art. 6 (1) lit. a or Art. 9 (2) lit. a DSGVO or on a contract pursuant to Art. 6 (1) lit. b and
• the processing is carried out with the aid of automated procedures.

You have the right to request that we transfer your personal data directly to another controller, insofar as this is technically feasible and does not affect the freedoms and rights of other persons.

This right to data portability does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

10.7. Right of objection
You have the right to object, at any time, for reasons connected with your specific situation, to the processing of your personal data, as referred to in Art. 6 (1) lit. e or lit. f DSGVO to file an appeal. This also applies to any profiling referred to in these provisions.

We will no longer process your personal data after an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it is connected with direct advertising.

If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.

Notwithstanding Directive 2002/58/EC (Directive on privacy and electronic communications), you have the possibility, in connection with the use of information society services, to exercise your right to object by means of automated procedures involving technical means.
specifications can be used.

10.8. Right to cancel
You have gem. Art. 7 (3) DSGVO the right to revoke your consent at any time. The withdrawal of consent does not render the lawfulness of the processing retroactively invalid.

10.9. Right of appeal to a supervisory authority
They shall have the right to appeal to a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right to lodge a complaint in the Member State of your residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

An overview of the respective data protection commissioners of the federal states as well as their contact details can be found under the following link:

https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

11. topicality and change of this data protection regulations

Status: February 2023