This version of the privacy policy complies with the requirements of the EU-GDPR, the European Union’s General Data Protection Regulation which came into force on May 25th, 2018

We take privacy very seriously. Therefore, we comply with the data protection provisions (GDPR) of this law in order to protect your data.

The legal person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union (EU) as well as other data protection regulations is:

BB WERTMETALL AG
Bachstr. 40
CH-5600 Lenzburg
UID: CHE-421,131,147 VAT

Responsibility for Data Protection (Data Protection Officer)

BB Wertmetall AG is not obliged to appoint an external and independent data protection officer. The company’s data protection officer is:

Werner Ullmann (CEO)
Tel.: +41 62 892 48 48
E-Mail: service [at] bb-wertmetall.ch.

General Information About Privacy

What data is covered?

Personal data is usually what is being referred to when speaking about data processing.  This is defined in the GDPR in Article 4 No. 1 as information referring to an identified or identifiable person. This refers to all data that is related (whether direct or indirect) to your person. This includes data such as first name, family name, addresses, e-mail addresses and IP addresses.

 

Why is personal information processed?

In order to conclude a contract with BB Wertmetall AG it is absolutely necessary to know your basic data. On the other hand, we want to offer you as a customer the best possible product and therefore we always strive to optimize our services. Our personal data processing is only performed in compliance with the applicable legal regulations.

This means that the data will only be processed if legal permission has been granted, especially if the data processing is required for the provision of our contractual services or for use in online services or is required by law. In addition, we process data if we have consent or we have a legitimate interest in the processing (e.g. interest in the analysis, optimization, economic operation, security of our online services, especially in the range measurement and collection of access data and use of third-party services).

 

When and to what extent do we process personal data?

The following is an overview of all operations in which your personal data may be processed.

 

For the provision of contractual services / registration

We process inventory data and contract data to meet our contractual obligations and services. (GDPR Art. 6 para. 1 lit. b).

 

Contact

If the contact is made by e-mail, the information will be processed to the extent necessary to answer the relevant questions. The online contact form only processes the essential contact data and inquiry transmission. Each user must agree to this transmission.

 

Visits to our Website

If you use our website, we or our authorized service providers may use cookies or similar technologies. The information collected helps us better tailor our services to our customers’ needs.

 

Website Hosting

The website of BB Wertmetall AG is operated on a Swiss server with an SSL certificate. All data is transmitted over a secure connection.

Applied technologies

This section shows the technologies utilized by BB Wertmetall AG and their use.

 

Cookies

Cookies help make your visit to our website easier, enjoyable and meaningful. Cookies are information files that your web browser automatically saves to your computer’s hard drive when you visit our website.

Cookies neither damage the hard disk of your computer nor are a user’s personal data transmitted to us by cookies. For example, we use cookies to track who has visited our portal and to infer how often certain pages or offers are visited and, more generally, how the portal is used.

Most internet browsers accept cookies automatically. However, you can configure your browser at any time so that no cookies are stored on your computer, or so that a note always appears when you receive a new cookie.

As a matter of principle, our digital offers may also be used without the acceptance of cookies.

 

Tracking and Web Analysis Tools

Based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes, and in conformity with GDPR Art. 6, para. 1, lit. f, this website collects and stores data using Matomo web analysis software (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (hereinafter “Mataomo”).

For the same reasons, pseudonymized user profiles may be created from this data and then evaluated. Cookies may be used in this process. Cookies are small text files stored locally in the cache of the site visitor’s Internet browser. The cookies enable, among other things, the recognition of the Internet browser. The data collected by Matomo Technology (including your pseudonymized IP address) will be processed on our servers.

The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this web site and is not merged with personal data about the bearer of the pseudonym.

If you do not agree to the storage and analysis of the data from your visit, then you may object to the storage and use at any time with a simple mouse click. In this case, a so-called opt-out cookie is stored in your browser, with the result that Matomo does not collect any data from your visit to our website. Please note, however, that the complete deletion of your cookies will result in the opt-out cookie being deleted as well. In that case it will need to be re-activated by you for any subsequent visits.

 

Opt-Out-iFrame:

IP addresses are immediately anonymized by Matomo, making visitor identification impossible. Anonymous statistics are stored separately from any personal information you may provide and do not allow any conclusions to be drawn about a particular person.

In addition, the “Do not track” function is activated in the Matomo installation. If your browser supports this function and you have activated the function in the browser settings, Matomo will not collect any data, even if you do not use the deactivation cookie mentioned above.

 

Data Collection When Accessing Our Website

A record of every access to the product pages on our website, as well as every file retrieval, is stored and processed in a log file for a limited period of time (exclusively for protection against and pursuit of security-relevant attempts to gain access, as well as for error analysis and for statistical purposes).

The following information is saved:

  • Date and time of your access
  • Your IP address, anonymized in shortened form
  • Browser type and version
  • The operating system used
  • The website from which you visited our web pages, files that you retrieve on our website, and where applicable, the website that you visit after ours (by clicking on an external link on our website)

Anonymized IP Address of Visitors

IP addresses identify the user of Internet services. This is considered to be personalized information, thus falling under the Data Protection Act. On this page, the users’ IP addresses are anonymized (the last bytes of the IP address) to the Analytics tool. An attribution to a natural person is not possible.

 

Registration and Comment Function

As a blog system, WordPress offers a variety of functions for commenting on pages and blog posts.

BB Wertmetall AG has basically deactivated this function. No user is allowed to register on the site. Thus, comments are not allowed and are not even possible. This makes the website safer and protects our users and customers from unauthorized disclosure of personal information.

 

Use of Additional Programs (plugins) and Integration of Third Party Offers

Our digital offerings are sometimes networked with third-party functions and systems. This applies, for example, to the contact and application form.

BB Wertmetall AG expressly does not use social media applications, so transmission of personal data to such services can be ruled out.

 

Login for Members

Only the administrator is able to login. Other persons or employees are not authorized to make changes on the website and for this reason have no access. The webmaster’s access data will not be shared.

E-mail Newsletter

Free newsletter subscriptions are offered on our website.  Data from the data entry form are transmitted to us when subscribers register for the newsletter. Newsletter registration requires only an e-mail address.  A more personalized communication is possible if the first and last name are provided. However, providing a name is not a requirement for newsletter subscriptions. In addition, the following data is collected upon registration:

  • Your email address
  • IP address of the calling computer
  • Date and time of registration

In order to process this data, your consent is obtained during the registration process and reference is made to this privacy policy.

Newsletter Registration and Logging

Our newsletter registration takes place in a so-called double opt-in procedure. After registration you will receive an e-mail requesting confirmation of your registration. This confirmation is necessary so that no one can register with someone else’s e-mail address. Newsletter registrations will be logged in order to prove the registration process was carried out in compliance with legal requirements. This includes the storage of the registration and the confirmation time, as well as the IP address.

Our Newsletter Distribution Service Provider

After a detailed search we selected “CleverReach”, a newsletter dispatch platform from CleverReach GmbH & Co. KG, Muehlenstr. 43, 26180 Rastede, GERMANY. They will be sending our newsletters.

The e-mail addresses of our newsletter recipients, as well as their other data described in the notes, are stored on the servers of CleverReach in Germany. CleverReach uses this information to send and evaluate the newsletters on our behalf.

Furthermore, the newsletter forwarding service provider may, according to its own information, transmit these data in pseudonymous form, without assignment to a user, in order to optimize or improve their own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletters or for statistical purposes, to determine from which countries the recipients come.

However, the newsletter forwarding service provider does not use the data of our newsletter recipients to write them down or to pass them on to third parties. We trust in CleverReach’s reliability, and their IT and data security. CleverReach guarantees compliance with European data protection regulations.

In addition, we have concluded a “Data Processing Agreement” with CleverReach.

In this contract, CleverReach agrees to protect the data of our users, to process it on our behalf in accordance with data protection regulations, and in particular, not to pass it on to third parties.

The Legal Basis for Data Processing

The legal basis for processing the data after the user has registered for the newsletter is the consent of the user according to GDPR Art. 6 para. 1 lit. a. The legal basis for sending the newsletter as a result of the sale of goods or services is UWG § 7 Abs. 3 (the law against unfair business practices). The use of the newsletter forwarding service provider is based on our legitimate interest according to GDPR Art. 6 para. 1 lit. f.


The Purpose of Data Processing

The collection of the user’s e-mail address serves to enable newsletter delivery. Our interest is directed toward implementing a user-friendly and secure newsletter system that serves both to satisfy our business interests and to meet user expectations.

Duration of Storage

The data will be deleted as soon as it is no longer required to fulfill the purposes for which it was obtained. Your e-mail address will therefore be saved as long as your subscription to the newsletter remains active.

Option for Objection and Removal

The receipt of our newsletter can be terminated at any time. In this case the previously given consent is revoked. A link to unsubscribe from the newsletter is provided at the end of each newsletter. After termination, your data will be deleted except for the e-mail address. The e-mail address is stored in a blocked list and is only used to ensure that no further e-mails are sent to your e-mail address.

Contact Forms

Description and Scope of Data Processing

On our website forms are available, which can be used for electronic contact. If a user takes advantage of this opportunity, the data entered in the entry form will be transmitted to us and saved. At the time of sending the message, the following data will also be stored:

  •     E-mail address of the user
  •     The IP address of the user
  •     Date and time of registration


The Legal Basis of Data Processing

The legal basis for processing the data is created by the indication of user consent according to GDPR Art. 6 para. 1 lit. a. The legal basis for the processing of the data transmitted in the course of sending an e-mail is found in GDPR Art. 6 para. 1 lit. f. If the e-mail contact aims to conclude a contract, then an additional legal basis for the processing is found in GDPR Art. 6 para. 1 lit. b.


The Purpose of Data Processing

The processing of personal data from the entry form serves only to enable our establishing contact. In the case of contact via e-mail, this also includes the required legitimate interest in processing the data. The other personal data handled during the transmission process serves to prevent the misuse of the contact form and to ensure the security of our information technology systems.


Duration of Storage

Your data will be deleted as soon as it is no longer required to fulfill the purpose for which it was collected.

For personal data received through the entry form on the contact page as well as personal data sent by e-mail, data will be deleted when the respective conversation with the user has concluded.

The conversation ends when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

Additional personal data collected during the transmission process will be deleted at the latest after a period of seven days.

 

Option for Objection and Removal

The user has the possibility at any time to revoke consent to the processing of personal data. If a user contacts us by e-mail, they may object to the storage of personal data at any time.

In this case, the conversation cannot be pursued any further. Below you will find a description of how revocation of consent and withdrawal of storage rights is made possible. In such cases, all personal data stored in the course of the contact will be deleted.

 

Your Rights

The Right to Be Informed

You can always ask for confirmation as to whether personal data concerning you personally is being held or processed by us. This information is of course free of charge. Please use the following entry form.

[wpgdprc_access_request_form]

 

Right to Correction

If the personal information we hold about you is incorrect or incomplete, you may request modification at any time. The correction must be made by us without delay.

Right to Deletion

So long as there is no legitimate interest to the contrary, you can assert your right to erasure at any time.

Revocation of Consent

Any data processing based on your consent will be discontinued as soon as you revoke your consent. The revocation can be made at any time and remain in effect for the future. Since we are required by our duty of accountability to save evidence of consent given, revocation of consent must be in writing. A notice of revocation by e-mail is sufficient.