Data Protection Information

1. Responsible body and data security

1. Responsible body and data security

Responsible body

The body responsible for data processing on this website is:

Bulthaup GmbH & Co KG
Aich, Werkstraße 6
84155 Bodenkirchen

Tel. +49 (0)8741 80 0
Email: datenschutz@bulthaup.com

Data protection

This website uses TLS (transport layer security) encryption for security reasons and to protect the transfer of confidential information, such as orders or requests which you send to us as the site operator. An encrypted connection can be recognized when the browser’s address line changes from “http://” to “https://” and by the padlock symbol in the browser line.

2. Data Protection Officer

2. Data Protection Officer

We have appointed a Data Protection Officer for our company:

Bulthaup GmbH & Co KG
Mr. Antonino Italia
Aich, Werkstraße 6
84155 Bodenkirchen

Tel. +49 (0)8741 80 0
Email: datenschutz@bulthaup.com

 

3. Collection of data on our website

3. Collection of data on our website

Cookies

Cookies are used in some of this website. They do not harm your PC or contain any viruses. Cookies make our website easier to use and more effective and secure. They are small text files which are placed onto your computer and saved by your Internet browser.

Most of the cookies we use are so-called “session cookies”. They are used to optimize user-friendliness and automatically deleted after your visit. We also use temporary cookies to optimize user-friendliness, which remain on your computer until deleted. These cookies allow us to recognize your browser on your next visit.

We also use cookies to collect statistical data about the use of our website, which are then analyzed to optimize our services for you (see section 4).

Your browser settings include options to inform you when cookies are placed on your computer, to only allow cookies on an individual basis, to accept cookies in particular cases or generally reject cookies and to turn off automatic cookie deletion when you close your browser. Deactivating cookies may restrict the functionality of this website.

Data processing via cookies is legally governed by Article 6 (1) (f) General Data Protection Regulation (GDPR).

Server log files

The site provider automatically collects and saves information in server log files, which your browser then automatically transfers to us. This information includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is processed to ensure you connect to the website seamlessly, can comfortably use our website, to analyze system security and stability and for other administrative purposes. This data will not be merged with other data sources.

This data processing is legally governed by Article 6 (1) (f) GDPR.

Contact form

If you submit a request via the “contact form”, “request an appointment at a retail partner”, or “order information material” web pages, the details you provide, including your contact information, will be used solely for the purpose of processing your request and stored by us in the event of any follow-up questions.

The declaration of consent you may (but need not) provide in these forms includes the following content:

Consent under data protection law:

I consent to the data I share via the contact form (mandatory information and any voluntary information) being collected, processed and used by bulthaup as the responsible organization for the purpose of sending information material by post, responding to my inquiry by email, and – if and to the extent expressly requested via the contact form – sending information via email. If I have requested that I be contacted and/or information material be sent to me by the bulthaup retail partner in my vicinity, my data (mandatory and voluntary information) may also be transmitted to the retail partner (in the case of retail partners based outside Germany, also to the bulthaup agency representing that retail partner) for this purpose and processed and used by them.

Please note: Without your consent, your request will not receive a response. Data from prospective clients outside Germany will be communicated to the retail partner nearest to you via the foreign bulthaup agency, if such agency exists. The list of bulthaup national agencies can be found here.

Data entered in the contact forms is processed on the basis of your consent (Article 6 (1) (a) GDPR). You can withdraw your consent to the processing and use of your data for the specified purposes at any time. Please send your withdrawal of consent by post to Bulthaup GmbH & Co KG, subject Data Protection, 84155 Aich, Germany or by email to datenschutz@bulthaup.com.

The data entered in these contact forms is stored until you request its erasure or withdraw your consent for it to be stored.

Commercial contact forms

With the “Become a bulthaup partner”, “Project contact form”, and “Press contact” contact forms, we collect, store, and process data communicated to us (mandatory and voluntary information) for the purpose of processing and responding to your inquiry.

Your consent constitutes the legal grounds for data processing (Article 6 (1) (a) GDPR).

If you have registered for our press mailing list, we will use the data you provided at registration to send you invitations or press releases via email and – in individual cases – also by post. If you registered using a foreign postal address, the invitations or press releases will be sent via a bulthaup subsidiary in that region or by a PR agency commissioned to do so on our behalf. Your data will only be sent to the bulthaup subsidiary or commissioned PR agency for this purpose. We will store your data for as long as you are registered with our press mailing list. You can remove your name from the mailing list using the Unsubscribe button (on our digital communications) or by sending a short email to: Datenschutz@bulthaup.com

Article 6 (1) (a) GDPR constitutes the legal grounds for processing. You can withdraw your consent to the processing and use of your data for the specified purposes at any time. Please send your withdrawal of consent by post to Bulthaup GmbH & Co KG, subject Data Protection, 84155 Aich, Germany or by email to datenschutz@bulthaup.com.

4. Social media

4. Social media

Sharing content via plug-ins (Facebook, Pinterest)

So-called “social plug-ins” are used on our website to raise awareness of our company pursuant to Article 6 (1) (f) GDPR. We currently use plug-ins from Facebook and Pinterest. Data, including personal data, may be sent via these plug-ins to service providers in the USA and potentially used by these service providers.

Protection tool

bulthaup does not collect any personal data via the social plug-ins or any personal data about the use of plug-ins. A program prevents data from being transmitted to the service provider in the USA without the user’s knowledge. This solution ensures that for the moment, no personal data is transferred to the provider of the social plug-in when you visit bulthaup’s websites. Data can only be transmitted to the service provider and stored there if you click on one of the social plug-ins.

Access by the service provider

The service provider then receives the information that you have accessed the corresponding sub-page of our website. This happens regardless of whether you have an account with the service provider and whether you are logged in. If you are logged in to the service provider this will be directly assigned to your account. If you click on one of the social plug-ins and, for example, link this website, the service provider will also store this information in your user account and publicly share this association.

If you do not wish this assignment to your profile with the service provider you must log out before clicking on one of the social plug-ins.

We have no influence over whether and to what extent the service provider collects personal data. The scope, purpose and storage period of the collected data is also unknown. It must be assumed that, at a minimum, the IP address and information related to the device used are collected and used. It is also possible that the service provider uses cookies.

Service providers’ details

More information about how the service providers deal with data protection can be found on their websites:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA

https://www.facebook.com/policies

Further information about the collection of data:

http://www.facebook.com/help/186325668085084

b) Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA

https://about.pinterest.com/en/privacy-policy

5. Analytical tools and advertising

5. Analytical tools and advertising

We use the following tracking measures pursuant to Article 6 (1) sentence 1 (f) GDPR. We aim to ensure these tracking measures support the needs-based design and continued optimization of our website. We also use tracking measures to collect statistical data about how our website is used, which is then analyzed to optimize our services for you.

The respective purpose of data processing and data categories are to be taken from the respective tracking tools.

Google Analytics

This website uses the functions of the Google Analytics web analysis service. This is provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA. Google Analytics uses cookies. These are text files which are saved on your computer and enable your use of the website to be analyzed. The information generated by the cookie regarding your use of this website, such as browser type/version, operating system used, referrer URL (the website you previously visited), host name of the access computer (IP address) and the time of the server request, is usually transmitted to Google’s server in the USA and saved there.

We have activated IP anonymization on this website. Your IP address is truncated by Google within the member states of the European Union or in other signatory states party to this agreement across the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google uses this information to analyze your use of the website with the aim of generating reports on website activities and providing the site operator with other services associated with website and Internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be linked to other data held by Google.

You can prevent the saving of cookies by selecting the appropriate setting in your browser software; however, please note that doing so may preclude access to all functions of this website. You can also prevent the collection of data generated by the cookie and related to the usage of the web site (including your IP address) by Google and the processing of such data by Google by downloading and installing the browser plug-in, which is available at: https://tools.google.com/dlpage/gaoptout?hl=en.

You can prevent the transfer of your data by Google Analytics by clicking the following link: This installs an opt-out cookie, which prevents your data from being collected when you visit this website in future.  Deactivate Google Analytics.

More information about how Google Analytics interacts with your user data can be found in Google’s Privacy Policy. https://support.google.com/analytics/answer/6004245?hl=en.

We have entered into a data processing agreement with Google.

Google Analytics remarketing

Our websites also use the functions of Google Analytics remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.

This function enables advertising target groups created by Google Analytics remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. Accordingly, interest-related and personalized adverts are shown, which have been adapted in accordance with your previous usage behavior and surfing habits on one device (e.g. cellphone) and also shown on another of your devices (e.g. tablet or PC).

If you have provided the appropriate consent, Google will link your web and app browser histories with your Google account. This allows every device which you log in to with your Google account to have the same personalized adverts shown.

To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to your Google Analytics data to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account. Please visit the following to do so: https://www.google.com/settings/ads/onweb/.

A potential summary of the data collected in your Google account is only carried out on the basis of your consent, which you can provide to or withdraw from Google (Article 6 (1) (a) GDPR).

More information and data protection information can be found in the Google Privacy Policy and Terms at: https://policies.google.com/technologies/ads?hl=en.

6. Newsletter

6. Newsletter

Newsletter data

If you have registered for our newsletter, we will only use the data collected when you register (title, first name, surname, email address, language, country) for the purposes of providing and sending the newsletter to you.

MailChimp

This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service which can organize and analyze the sending of newsletters. If you enter data for the purpose of subscribing to the newsletter (such as your email address), this will be stored on the servers of MailChimp in the USA.

We have concluded a data processing agreement with MailChimp, in which we obligate MailChimp to protect our customers’ data and refrain from disclosing such data to third parties. The agreement can be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/. MailChimp is certified according to the EU-US Privacy Shield. The Privacy Shield is a framework agreed between the European Union (EU) and the USA, which guarantees that European data protection standards will be adhered to in the USA.

We are able to analyze our newsletter campaigns with the assistance of MailChimp. If you open an email sent by MailChimp, a file contained in the email (a so-called web beacon) connects to the MailChimp servers in the USA. This can determine whether a newsletter email has been opened and what links have been clicked on. In addition, technical information is collected (such as time accessed, IP address, browser type and operating system, for example). This information cannot be attributed to an individual newsletter recipient. It merely facilitates the statistical analysis of the newsletter campaign. The results of this analysis may be used to align future newsletters to the interests of the recipient more effectively.

More information can be found in MailChimp Terms of Use at: https://mailchimp.com/legal/terms/.

Withdrawing consent

Data entered in the newsletter registration form is only processed on the basis of your consent (Article 6 (1) (a) GDPR). This consent may be withdrawn at any time, for instance using the “Unsubscribe” link in our newsletter. You will then no longer be sent the newsletter and any related data processing will also cease. After unsubscribing from the newsletter, the corresponding data will be erased from both our servers as well as from those of MailChimp. This withdrawal of consent does not affect the processing of data which is stored by us for other purposes (such as email addresses for the member area, for example) or the legality of the data processing for the newsletter carried out before consent was withdrawn.

7. Plug-ins and tools

7. Plug-ins and tools

YouTube

Our website uses plug-ins from the website YouTube, which is operated by Google. The operator of this website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our web pages equipped with a YouTube plug-in, a connection is made to the YouTube servers. This will notify the YouTube servers which of our web pages you have visited.

If you are logged in to your YouTube account, this will allow YouTube to directly associate your browsing habits with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube to display our websites in a more appealing manner. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.

More information about how YouTube interacts with your user data can be found in YouTube’s Privacy Policy. https://policies.google.com/privacy?hl=en.

Monotype Web Fonts

This website uses web fonts to uniformly display fonts, which are provided by Monotype Imaging Holdings Inc., a Delaware corporation with its principal offices at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA. When accessing a web page, your browser loads the required web fonts in your browser cache to show text and fonts correctly.

For this purpose, your browser must connect to Monotype’s server. This informs Monotype that your IP address accessed our website. We use Monotype web fonts to display our websites in a uniform and appealing manner. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.

If your browser does not support web fonts, your computer will use a standard font.

More information about Monotype web fonts can be found in the Legal section at https://www.fonts.com/info/legal and in Monotype’s Privacy Policy at https://www.fonts.com/info/legal/privacy.

Google Maps

This website uses an API from the map service Google Maps. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.

It is necessary to store your IP address to use the functions of Google Maps. This information is usually transmitted to Google’s server in the USA and stored there. The site operator has no influence over this transmission of data.

We use Google Maps to display our websites in an appealing manner and help customers find our locations stated on the website. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.

More information about how Google interacts with your user data can be found in Google’s Privacy Policy. https://policies.google.com/privacy?hl=en.

8. Rights in accordance with the General Data Protection Regulation

8. Rights in accordance with the General Data Protection Regulation

In accordance with the EU General Data Protection Regulation, you have a right of access (Article 15), a right to rectification and erasure (Articles 16, 17), the right to restrict processing (Article 18) and a right to data portability (Article 20), as well as the right to lodge a complaint with a supervisory authority (Article 77).

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, if justified due to reasons pertaining to your specific circumstances or if you are objecting to direct advertising. If you are objecting to advertising, you have a general right to object, which will be implemented by us without you having to provide details about your particular situation.

If you wish to exercise your right to withdraw your consent or object, it is sufficient to send an email to datenschutz@bulthaup.com.

9. Up-to-dateness of and changes to this Privacy Policy

9. Up-to-dateness of and changes to this Privacy Policy

This Privacy Policy is currently valid as of May 2018.

It may be necessary to make changes to this Privacy Policy due to further development of our website and services offered there, or on the basis of changes in legislation or to regulatory requirements.

© Copyright Bulthaup GmbH & Co KG, Bodenkirchen (Germany). All rights reserved.