Section 1: Introduction and general information
About us and our website
We, BSH Hausgeräte GmbH, Carl-Wery-Strasse 34, 81739 Munich, operate this website. Please use the contact information provided on the https://www.bsh-group.com to contact us.
If you get in touch with us, we will store and process the information you provide for the purpose of handling your enquiry and any follow-up questions. We are permitted to process data in this context by law (article 6(1b) of Regulation (EU) 2016/679). We will delete your information once your enquiry has been handled.
Our guiding principles
We take protecting your information very seriously. Your data is therefore processed with great care and in strict compliance with applicable data protection law. Organisational and technical security measures have been taken to protect all of our websites against the risks present in processing personal data. Our partners who support us in the provision of this website must comply with these provisions as well.
What we log as standard
You can use all the areas of our website that are not access-protected without disclosing your identity. We log every use of our website as standard in order to remedy faults and clarify security incidents. You can find more about our log data in the section “How we process your data”.
Which permissions do we have to process your data
We respect your privacy. Consequently, we only process your data when we are permitted to do so. It goes without saying that you can also give us permission to process your data by opting in to data processing on our website. In other cases, we process your data because we are permitted to do so by law. The same applies when you make use of other services on our website that require your data to be processed. We are also permitted to process your data when we have a legitimate interest in doing so. One example of this is the log data that we collect in order to ensure that our website can be operated without defects, amongst other things. In any case, we will inform you if any relevant processing of your data takes place, and your interests are taken into consideration each time that data is processed as a matter of course. In the event that you have cause for complaint, you can find your rights regarding the processing of your data in the latter section of this Data Protection Information.
The permissions we make use of, and when, are outlined in the following section. You can find more detailed information on how your data is collected, processed and used on our website (i.e. the type, scope and purpose of data processing) in the same section.
What else you should know:
Users below the age of 16 should only transmit personal data to us with the consent of their parent or legal guardian. The data protection law that applies may result in different age limits in this regard.
Our website may contain links to other websites. We have no influence over how your data is processed on these websites or their compliance with provisions on data protection. Please note any Data Protection Information they provide.
Section 2: Data processing on the website
Log data
Data processing by visiting our website
For technical reasons, each time your internet browser accesses our website it automatically sends information to our web server (i.e. log data). We store some of this information in log files, such as:
- Visited domain
- The date and time of the request
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- The web browser, system language, operating system and device type used
- IP address of the requesting computer
- The amount of data transferred
Log data does not contain personal data. As a general rule, we only analyse log data in order to remedy faults in the operation of our website or clarify security incidents. We store this log data indefinitely.
It is sometimes necessary for us to collect additional personal information as well as log data in order to remedy faults or preserve evidence relating to security incidents. In these cases, we are permitted to process the log data by law (article 6(1f) of Regulation (EU) 2016/679). We delete this data once the fault has been remedied or the security incident has been clarified in full, or if the original purpose of the processing no longer exists due to other factors. In the event of a security incident, we will transmit log data to the investigating authorities on a case-by-case basis, to the extent permitted.
We always store log data separately from other data collected that relates to the use of our website
Website Purpose and contact functionalities
This website’s purpose is to share relevant information with startup companies that are active in business and technology fields relevant to BSH. This website is also intended to give startup companies the chance to contact us via electronic means and submit data to us. We will use this data for the assessment of entering a potential business relationship with you and for further activities once a business relationship has been started. There are several ways on getting into contact with us:
- Contact via contact form or via e-mail
If you send us enquiries via contact form or e-mail, your details from the enquiry form or e-mail, including the contact data you have provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. You are required to provide your name and an e-mail address to contact us. Your company is optional. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 letter f GDPR. Your data will be deleted after final processing of your inquiry, provided that there are no legal storage obligations to the contrary. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.
- Contact via the application form
You have the possibility to apply to partner with us on our website. We collect and use the following personal data during application:
- First name and surname
- E-Mail address
- Role in the company
In addition, voluntary information can be provided (e.g. company presentation). Mandatory data provided for the purpose of registration are marked with an asterisk in the input mask as a mandatory field. By submitting your information, you express your interest in becoming a candidate for our BSH Startup Kitchen. The data is required to create a short company profile and evaluate if your company fulfils the requirements for the BSH Startup Kitchen. If consent is given within the context of submission, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR. You can delete your profile including the data you have provided by sending a message to the responsible person named in section 2.
Notes taken from further communication
In case of further, ongoing communication and exchange of information with you via email, telephone or other means of communication, we will make and store relevant notes as appropriate for pursuing a potential business relationship.
Participation in special events
When you register for an event, we store and use the information you provide in order to run the event and complete any follow-ups. The data we collect for this purpose depends on the registration form on the event page in question.
Upon request, registered participants can receive information about the data they provided when registering or have any incorrect details corrected. To request this, please use the contact information provided at the end of this Data Protection Information.
We are permitted to process your data to run the event and complete any follow-ups by law (article 6(1b) of Regulation (EU) 2016/679). Your information is deleted once it is no longer required to run the event or complete any follow-ups.
Cookies
We use cookies. Cookies are small text files, which we store on your device when you visit our website. These cookies are sent back to us every time you access our website subsequently. This allows us to recognise you, for example, or makes navigating our website easier for you thanks to the information stored in the cookies.
Cookies cannot be used to run programs or transfer viruses to a computer. Cookies can only be read by the web server they originate from.
We do not share the information stored in the cookies with third parties without your express permission.
You can also view our website without cookies. Internet browsers are often configured to accept cookies. To prevent your internet browser from using cookies, you can (1) opt out of the use of cookies when you access our website using the cookie layer (if available) or (2) disable cookies use via the settings in your internet browser. The help functions in your browser can show you how to disable and/or delete cookies in your internet browser. Please note that disabling/deleting cookies may result in individual functions on our website no longer working as expected. Cookies that may be required for certain functions on our website are set out below. In addition, disabling/deleting cookies will only affect the internet browser used to do so. Disabling/deleting cookies must therefore be repeated for any other internet browsers accordingly.
Cookies that we use for specific functions, without references to individuals:
- Cookies that store certain user preferences (e.g. search or language settings)
- Cookies that store information in order to guarantee flawless playback of video or audio content
- Cookies that temporarily store certain user entries (e.g. the contents of a shopping basket or online form)
Cookies that we use for specific functions, with references to individuals:
- Cookies that serve to identify or authenticate our users.
We are permitted to process data in this context by law (article 6(1f) of Regulation (EU) 2016/679). We store this data until the cookie in question expires or until you delete it.
Any further processing of personal data using cookies is outlined in the relevant sections within this information.
Web analysis and advertising tracking
Google Analytics
Our website uses Google Analytics, an internet analysis service provided by Google Inc. “(“Google”). Google Analytics uses cookies to help the website analyze how users use the site and web beacons. The information generated in relation to the use of this website is transferred by default to a Google server in the USA and stored there. Google uses this information for the purposes of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties when required to do so by law or when such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. We use Google Analytics only with IP anonymization enabled. This means that Google will reduce the IP address of users within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area, which may exclude any personal relationship. Google Inc., based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. Processing is carried out in accordance with Art. 6 Para. 1 letter f GDPR and § 15 Para. 3 TMG respectively on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
On behalf of the operator of this website, Google will use this information to analyze your use of the website and to generate reports on website activity. Google also uses this information to provide other services related to the use of the website and the internet to the website operator. The IP address sent by your browser as part of Google Analytics is not combined with other Google data. The terms of use of Google Analytics and information on data protection can be accessed via the following links: http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.
You can prevent cookies from being saved by adjusting the settings of your browser software accordingly. However, we must point out that in this case you will not be able to use all functions of this website without restrictions. You can also prevent Google from collecting the data generated by the cookie and analyzing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=en.
To prevent cookies from being saved, you just need to click on “No” in the cookie information field on the website.
Information on the handling of user data at Google Analytics can be found in Google’s data protection declaration: https://support.google.com/analytics/answer/6004245?hl=en
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our website. Provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
With reCAPTCHA it should be checked whether the data entry on our website (e.g. in a contact form) is done by a person or by an automatic program. For this reCAPTCHA analyzes the behavior of the web site visitor on the basis different characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis reCAPTCHA evaluates different information, e.g.
- IP address
- Duration of stay of the website visitor
- Mouse movements made by the user
The data collected during the analysis is forwarded to Google.
Further information about Google reCAPTCHA and Google’s privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/v3beta.html
The reCAPTCHA analyses run completely in the background. Visitors to the website are not informed that an analysis is taking place. Data processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO.
We have a legitimate interest in protecting our website from abusive automated spying and from unwanted, automated transmissions (spam).
We do not store any personal data from the use of reCAPTCHA. In general, personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ends.
Social Media Links
Social networks (e.g. Facebook, Twitter and Linkedin) are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link you will be redirected to the page of the respective provider. Only after forwarding is user information transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective data protection regulations of the providers you use.
Cases where we transmit your data
We work together with a number of service providers to implement and operate our website. We have chosen these service providers carefully and concluded a data protection agreement with each individual service provider to keep your information safe.
The service providers we use to implement and operate our website are:
- Service provider for hosting services
- Service provider for programming services
- Service provider for sales and marketing services
We only transmit your data to other recipients where necessary to fulfil a contract with you, where we or the recipient has a legitimate interest in the disclosure of your data, or where you have given your consent to that transmission. These recipients include service providers and other companies within our corporate group. Furthermore, data may be transmitted to other recipients in the event that we are obliged to do so due to legal provisions or enforceable administrative or court orders.
Transmission to recipients outside the EEA
We also transmit personal data to recipients based outside of the EEA, in so-called third countries. In this case, we ensure ‒ before any data is shared ‒ that either an appropriate level of data protection is maintained by the recipient (e.g. on the basis of an adequacy decision made by the EU Commission for the respective country or the agreement of standard EU contractual clauses between the European Union and the recipient) or that you have given your consent to said sharing.
We are happy to provide you with an overview of the recipients in third countries and a copy of the specific provisions agreed to ensure an appropriate level of data protection. To request this, please use the contact information provided at the end of this Data Protection Information.
Duration of data storage
The duration of the storage of personal data is determined by the relevant legal retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is necessary for contract fulfilment or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if it is no longer necessary for these purposes or if you make use of your right of revocation or objection.
Section 3: User rights
Your rights
Should you have cause for complaint, you can find an outline of your rights below. To exercise your rights, please use the contact information provided at the end of this Data Protection Information.
Your right to information about your data
We will provide you with information about the data we hold about you on request.
Your right to correct and complete your data
We will correct inaccurate information about you if you notify us accordingly. We will complete incomplete data if you notify us accordingly, provided this data is necessary for the intended purpose of processing your data.
Your right to delete your data
We will delete the information we hold about you on request. However, some data will only be deleted subject to a defined period of retention, for example because we are required to retain the data by law in some cases, or because we require the data to fulfil our contractual obligations to you.
Your right to have your data blocked
In certain legally determined cases, we will block your data if you would like us to do so. Blocked data is only further processed to a very limited extent.
Your right to withdraw consent
You can withdraw consent given for your data to be processed with effect for the future at any time. The legality of processing your data remains unaffected by this up to the point at which your consent is withdrawn.
Your right to object to the processing of your data
You can object to the processing of your data with effect for the future at any time, if we are processing your data on the basis of one of the legal justifications set out in article 6(1) e) or 1) f) of Regulation (EU) 2016/679. In the event that you object we will cease processing your data, provided that there are no compelling and legitimate grounds for further processing. The processing of your data for the purposes of direct marketing never constitutes compelling and legitimate grounds for us.
Your right to appeal to a regulatory authority
You can lodge an appeal pertaining to data protection with a data protection authority. To do so, contact the data protection authority responsible for your place of residence or the data protection authority under whose jurisdiction we fall (named below).
Bavarian Data Protection Authority (BayLDA), www.baylda.de
Your point of contact for all questions relating to data protection
If you have any questions relating to data protection or exercising your rights, you can use the following contact information to get in touch with our data protection officer directly:
BSH Hausgeräte GmbH
Data Protection Officer
Carl-Wery-Str. 34
81739 Munich, Germany
Data-Protection@bshg.com
Changes to this Data Protection Information
This Data Protection Information reflects the current state of data processing on our website. In the event of changes to data processing, this Data Protection Information will be updated accordingly. We always provide the latest version of this Data Protection Information on our website so that you can find out about the scope of data processing on our website.