Diese Datenschutzerklärung auf Deutsch lesen

This privacy policy explains what personal data we process when you visit breb.de, why we process it and what rights you have. It describes this website only — not the processing that takes place when you are our customer or business partner.

1. Controller

The controller responsible for data processing on this website is:

BREB GmbH & Co. KG
Kapitän-Alexander-Str. 16
27472 Cuxhaven
Germany

Phone: +49 (0) 4721 590 54 0
Fax: +49 (0) 4721 590 54 99
Email: admin@breb.de

Managing Director: Arne Ehlers

2. Data protection officer

We have appointed a data protection officer. You can reach him at:

Arne Ehlers
Kapitän-Alexander-Str. 16
27472 Cuxhaven
Germany
Phone: +49 (0) 4721 590 54 0
Email: arne-ehlers@breb.de

3. Server log files

Every time a page is requested, our web server automatically records data that your browser transmits. This happens whether or not you enter anything on this site:

— your IP address
— date and time of the request
— the page or file requested and the amount of data transferred
— the page you came from, if any
— the browser and operating system you use

We use this data to deliver the site, to keep it stable and secure and to trace technical faults. The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in a website that works and is not abused. The data is not merged with other sources and is not used to identify you personally. Log files are rotated daily and deleted after 14 days at the latest, unless a specific incident requires us to keep them longer as evidence.

4. Cookies

This website sets exactly one cookie, named winter_session. It holds a random session identifier so that the server can recognise consecutive requests from the same browser — this is what makes form submissions and the content management system work at all. It contains no advertising identifier and no profile, and it is deleted when you close your browser at the latest.

Because this cookie is strictly necessary to provide the service you requested, we may store it without your consent under § 25(2) no. 2 TDDDG; the legal basis for the associated processing is Art. 6(1)(f) GDPR. We do not use any cookies that require consent, which is why this site shows no cookie banner.

5. Hosting

This website is hosted on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Falkenstein, Germany. The provider processes the access data described under point 3 exclusively on our behalf and according to our instructions, on the basis of a data processing agreement pursuant to Art. 28 GDPR. Hetzner's privacy policy is available at https://www.hetzner.com/de/legal/privacy-policy/.

6. Contacting us by e-mail, telephone or fax

This website has no contact form. If you write, call or fax us using the details published here, we process the data you provide — typically your name, your contact details and the content of your enquiry — in order to answer it.

Where your enquiry relates to a contract or to steps taken before entering into one, the legal basis is Art. 6(1)(b) GDPR. In all other cases we rely on our legitimate interest in dealing with enquiries addressed to us, Art. 6(1)(f) GDPR. We keep this data until your enquiry has been dealt with and you ask us to delete it, unless statutory retention periods require us to keep it longer.

Please note that e-mail sent over the internet is not encrypted end to end and can in principle be read by third parties. Please do not send confidential information by unencrypted e-mail.

7. Newsletter

You can subscribe to our newsletter on the newsletter page. The e-mail address is required; company name, first name and last name are optional. We use the address to send you the newsletter and to confirm that the address belongs to you.

The newsletter is distributed by 1&1 Mail & Media GmbH, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you submit the form, the details you entered are transmitted directly to this provider and stored there on our behalf, on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The legal basis is your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for instance by using the unsubscribe link in every newsletter or by writing to us. Withdrawing does not affect the lawfulness of the processing carried out until then. After you unsubscribe, we delete your address, or keep it on a blocklist for the sole purpose of not mailing you again.

8. Job applications

If you apply to us — by e-mail to bewerbung@breb.de, by post or through our vacancies page — we process the data you send us in order to decide on your application. This may include your contact details, your CV, certificates and any notes we take during the application process.

The legal basis is § 26(1) BDSG in conjunction with Art. 88 GDPR and Art. 6(1)(b) GDPR, both of which cover the processing needed to decide whether to enter into an employment relationship. Where you give us data voluntarily that goes beyond this, the basis is your consent, Art. 6(1)(a) GDPR.

If we do not offer you a position, we delete your documents six months after we notify you, unless a longer period is needed to defend against legal claims or you have agreed that we may keep them longer. With your consent we include your application in our applicant pool, where it is deleted after two years at the latest. If you are hired, the data is transferred to your personnel file.

9. Fonts

This website uses web fonts so that typefaces look the same everywhere. The font files are stored on our own server and are loaded exclusively from there. No connection to third-party servers — Google Fonts in particular — is established, and no data is transferred to third parties for this purpose.

10. What this website does not do

We state this explicitly because it determines what data leaves your browser: this website uses no web analytics and no tracking, embeds no social media plug-ins, no videos, no maps and no advertising, and loads no scripts, fonts or stylesheets from third-party servers. Apart from the newsletter form described under point 7, which you have to fill in and submit yourself, visiting this site transfers no data to anyone but us and our host.

11. SSL/TLS encryption

This site uses TLS encryption for every connection. You can recognise it by the address starting with https:// and by the padlock in your browser. While encryption is active, the data you transmit to us cannot be read by third parties.

12. Disclosure to third parties

We do not sell your data and do not pass it on for advertising purposes. We disclose personal data only

— to the processors named in this policy, who act on our instructions under a contract pursuant to Art. 28 GDPR,
— where you have given your explicit consent, Art. 6(1)(a) GDPR,
— where we are legally obliged to do so, Art. 6(1)(c) GDPR, or
— where it is necessary to establish, exercise or defend legal claims, Art. 6(1)(f) GDPR.

We do not transfer personal data to countries outside the European Economic Area.

13. Your rights

You have the following rights regarding the data we hold about you:

Access — Art. 15 GDPR: you may ask us at any time, free of charge, what data we process about you, where it came from, whom we disclose it to and how long we keep it.

Rectification — Art. 16 GDPR: you may ask us to correct inaccurate data and to complete incomplete data.

Erasure — Art. 17 GDPR: you may ask us to delete your data, unless we are required or entitled to keep it, for example because of statutory retention periods.

Restriction of processing — Art. 18 GDPR: instead of erasure you may ask us to restrict processing, for instance while a request for rectification is being examined.

Data portability — Art. 20 GDPR: you may ask us to hand over the data you provided in a structured, commonly used, machine-readable format, or to transmit it to another controller.

Objection — Art. 21 GDPR: where we process data on the basis of a legitimate interest, you may object for reasons arising from your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Withdrawal of consent — Art. 7(3) GDPR: where you have given consent, you may withdraw it at any time with effect for the future.

To exercise any of these rights, an informal message to admin@breb.de is enough.

14. Right to lodge a complaint

If you believe that we process your data unlawfully, you may lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence or place of work. The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
www.lfd.niedersachsen.de

15. Objection to promotional e-mails

We object to the use of the contact details published in our legal disclosure for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising being sent to us.

16. Changes to this privacy policy

We update this privacy policy whenever we change how this website processes data — for example when a service is added or removed. The version published here always applies to your current visit.