1. Responsible body and contact details

Controller in the sense of the GDPR for these Internet pages is

BUCHEN Industrial Services Baltikum OÜ
Kapteni tee 5 Soodevahe
75322 Rae vald
Estonia

Further company details can be found in the Imprint.

Contact details of our data protection officer:

REMONDIS SE & Co.KG
Brunnenstraße 138
44536 Lünen
datenschutz@remondis.de

REMONDIS SE & CO. KG acts as a single point of contact for data subjects and is responsible for information obligations pursuant to Art. 13 and 14 GDPR, data protection impact assessments pursuant to Art. 24, 32 GDPR.

2. Declaration of joint responsibility

REMONDIS SE & Co. KG and its subsidiaries and associated companies exercise joint responsibility in many areas in accordance with § 26 of the GDPR. Services and supplies are generally provided by the subsidiaries of our Group, which use the central data processing system in our Group for this purpose. The joint responsibility extends in particular to the following areas:

- Customer databases
- Application management & recruiting

Within the framework of joint responsibility, REMONDIS SE & CO KG and its subsidiaries and associated companies have agreed which of them is responsible for which duties under data protection law (in particular information duties in accordance with Art. 13, 14 GDPR). Within the scope of joint responsibility, REMONDIS SE & Co. KG and the subsidiary or associated company concerned are jointly obliged to provide the information required under Art. 13, 14 GDPR. The companies shall provide the respective requested company with the necessary information from their area of activity. The companies shall inform each other without delay of the legal positions asserted by data subjects and provide each other with all information necessary to respond to requests for information. Data protection rights can be asserted against all companies involved.
In addition, some processing operations may give rise to joint responsibility between REMONDIS companies or with third parties. These are dealt with in the context of the respective processing (Part B).

3. Data categories, purposes and legal basis of data processing

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as all other applicable legal provisions. The collection and processing of data is determined by the service or information you have chosen.

In general, we collect the following information:

• Last name, first name, salutation
• E-mail address
• Communication data (IP address, device information)
• Usage data (web pages visited, access times, interest in content)
• Address
• Telephone number

The specific data collection and processing can be found in the individual processing operations (Part B) as well as in the respective provisions of our contractual documents.

4. Data recipients

We only transfer your personal data to third parties in the following cases:

• The transfer takes place in compliance with a legal requirement under which we are obliged to report or pass on the data.
• The transfer of data takes place to external companies that act as order processors on our behalf or that act on our behalf (this concerns, for example, courier and logistics companies, call centres, external computer centres, EDP and IT applications, website management, auditing services, credit institutions, data disposal, etc.).
• The transmission of data to third parties takes place on the basis of your consent.
• Data is transferred for the purpose of processing a contractual relationship with you pursuant to Art. 6 para. 1 s. 1 lit. b GDPR (e.g. to an affiliated company within the group (cf. item 2) or a subcontractor or to a logistics company).

5. Deletion of data and duration of storage

In principle, we process and store your data only for the duration of our business relationship, including the initiation and execution of the contract as well as the statutory retention periods.

If the data is no longer required for the fulfilment of contractual or legal obligations and rights, it is regularly deleted, unless its – temporary – further processing is necessary for the fulfilment of the purposes listed above for an overriding legitimate interest.

Insofar as individual processing of personal data requires other deletion periods, these are mentioned in the description of the individual processing operations under section B.

6. Processing of your data in a third country

Data is only transferred to bodies in third countries (states outside the European Union (EU) or the European Economic Area (EEA)) if it is necessary for the execution of an order/contract from or with you, if it is required by law (e.g. reporting obligations under tax law), if appropriate data protection levels exist or if you have given us your consent.

The processing of your data in a third country may also be carried out in connection with the involvement of service providers as part of commissioned processing. If there is no EU Commission decision on an adequate level of data protection for the country in question, we will ensure through appropriate contracts that your rights and freedoms are adequately protected and guaranteed. For more detailed information, please refer to the individual descriptions of the processing operations under section B.

Information on the appropriate or adequate safeguards and on the possibility of obtaining a copy from you can be obtained from the Data Protection Officer upon request.

7. Your rights as a data subject

Upon request, we will provide you with written or electronic information as to whether and which of your personal data is stored with us (Art. 15 GDPR) and we will check your entries for deletion (Art. 17 GDPR), correction (Art. 16 GDPR), restriction of processing (Art. 18 GDPR) and transfer (Art. 20 GDPR) of your personal data and execute them if the conditions are met.
For this purpose, please contact:

REMONDIS SE & Co. KG
- Data Protection Officer -
Brunnenstr. 138
D-44536 Lünen
datenschutz@remondis.de

Insofar as you are of the opinion that the processing of your personal data is carried out unlawfully, you may lodge a complaint with a supervisory authority (Art. 77 GDPR). A list of the data protection officers and their contact details can be found under the following link https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

8. Information on the right to object

Insofar as the processing of your personal data is carried out on the basis of Art. 6 para. 1 s. 1 lit. f GDPR (data processing based on a balance of interests) or on the basis of Art. 6 para. 1 sentence 1 lit. e GDPR (data processing in the public interest), you have the right to object to the processing at any time.

We will then in any case no longer process the personal data for the purposes of direct marketing or related profiling and furthermore not for other purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. In this case, you must provide reasons for the objection that arise from your particular situation.

If possible, you should send your objection to the following contact address:
datenschutz@remondis.de

The same applies if you have given your consent to the collection or use of personal data and wish to revoke it. You can revoke such consent at any time with effect for the future by e-mail or letter.

1. Logging

When using the website, certain connection data and data provided by your Internet browser are temporarily stored. The following data is logged for the operation of the website:

• IP address of the retrieving computer
• Operating system of the retrieving computer
• Browser version of the retrieving computer
• Name of the retrieved file
• Date and time of retrieval
• Amount of data transferred
• Referring URL
• Connection logging

The data collection and processing of the log file information is based on our legitimate interest and for the purpose of securing our online offer. The log file information is stored anonymously after the session has ended.

2. Contact form/ requests for information

In the interest of communication with customers and interested parties, we offer a contact form on our website where you can request information about our products or contact us in general. In addition to the voluntary information and the content of your message, we require the following information from you:

Company
Form of address
Last name
Email address

We need this information to process your request, to contact you correctly and to send you an answer. Requests received via the contact form are stored as emails and regularly checked to see whether data can be deleted. Should data no longer be required in the context of a relationship with a customer or interested party, or should the customer have a contrary interest, we will delete the data concerned not later than after 180 days, provided that this does not conflict with statutory retention obligations. The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Insofar as contact is made to initiate contractual relations, the legal basis is Art. 6 para.1 lit. b) GDPR.

3. Matomo

On our websites we use a version of Matomo which is implemented on our own servers. This is an open source analysis software for the purpose of statistical evaluation of visitor access. Based on this evaluation, we particularly wish to track which of our sites are accessed and how often, but not by whom they are accessed. The implementation of Matomo on our servers does not use any cookies. We only store anonymised user data for collecting general statistical values, without comprehensively analysing user behaviour. A comprehensive analysis of user behaviour is also not possible due to the anonymised collection of the data. The IP address transmitted in the server log-in is anonymised on our server before it is transmitted to the Matomo installation and replaced by a random IP address. It is not possible to trace the IP address using the anonymised data, as time entries are randomised by the Matomo installation.
The purpose of the processing is the statistical analysis of user behaviour to optimise the functionality of our websites. Our legitimate interest lies in the improvement of our website.
The legal basis for the use of Matomo is Art. 6 para. 1 s. 1 lit. f GDPR.

4. Google services

We only transfer your personal data to third parties if you have consented to the transfer, if the transfer is necessary for the execution of the offers or services that you wish to make use of, or if a legal authority for transfer exists and the protection of your legitimate interests is guaranteed.
With the exception of the use of Google Fonts and Google Maps, no personal data collected by us will be processed in a third country. The provider of these services is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google may collect information (including personal data) and process it. It cannot be ruled out that Google also transmits the information to a server in a third country, including the USA. The prevailing opinion is that the level of data protection in the USA does not currently reach the standard applicable in the EU, which is why there is currently no adequacy decision by the European Commission or suitable guarantees to ensure data protection.
Our company has no influence on this and also no conclusive information about which data Google actually collects and processes. According to Google, the following data (including personal data) may be collected and processed:

• Log data (in particular the IP address)
• Location-related information
• Cookies and similar technologies
• Unique application numbers

If you possess a Google account and have logged in there while you are on our websites, Google can store and possibly assign the processed information according to your account settings. According to information from Google, activities on other websites and in apps are possibly connected with your personal data, depending on the account settings, in order to improve Google's service and advertising provided by Google. You will find more information on this at https://policies.google.com/privacy?gl=de
You can prevent a direct connection of these data by logging out from your Google account or also changing the pertinent account settings in your Google account.
In addition, you can change your Cookie settings (e.g. erase or block Cookies).
Further information on the Google account settings can be found at https://safety.google/security-privacy/
You will find further information in the Google privacy statement, which you can access here: https://policies.google.com/privacy?gl=de

4.1 Google Maps

We use the services of "Google Maps" from the Google provider to incorporate the maps of this service on our websites.
By incorporation of these services, which are located on Google servers, information on the user (including the IP address) is processed by Google so that the contents inquired can be transmitted to the browser. In addition, Google can also use so-called web beacons (invisible graphics). With these cookies and web beacons, information such as visitors to websites or information about the users' devices can be recorded and analysed. The information generated by cookies and web beacons about the use of our websites (including the users' IP addresses) are transmitted to a Google server, possibly in the USA or other third countries, and stored there. This information can be forwarded to Google's contracting partners by Google.
By incorporating Google Maps, we pursue the purpose of making our locations easier to find and of giving you a better overview of our offers.
The legal basis for the processing of personal data described here is Art. 6 subsection 1 lit. a) GDPR, insofar as we have requested your consent for the use of the Google Maps services. Otherwise, your personal data are processed on the basis of our legitimate interest in an efficient, economical and user-friendly service (Art. 6 subsection 1 lit f) GDPR.
Detailed information on Google Maps can be found on the websites https://cloud.google.com/maps-platform and under https://policies.google.com/privacy
Further information on data processing by Google in the course of the use of Google services can be found in the section on "General information on Google services".
In particular, the following data are processed by Google Maps:

• IP addresses
• Users' location data    

For the use of Google Maps, we have concluded a contract for commissioned processing pursuant to Art. 28 GDPR with Google. Google processes the data by our order, in order to portray and to trigger the services on our websites. Google can possibly transmit this information to third parties to the extent provided for by law or to the extent that third parties process these data by order of Google.

Right of objection

As far as the legal basis for the processing by Google Maps is our legitimate interest according to Art. 6 subsection 1 lit. f) GDPR, you have a right of objection according to Art. 21 GDPR. You can notify us of your objection by mail or e-mail to: datenschutz@remondis.de.
For more information, please refer to section 8 (Revocation and objection).
The processed information is only stored for a long as is necessary for the planned purpose or has been prescribed by law. Provision of the personal data is not mandatory and has not been prescribed by law or by contract, nor is it necessary for conclusion of a contract.

Cookies are small text files that are stored on your hard drive by your browser. We also use so-called session cookies. These serve to establish a clear connection between you and our Internet presence. Only a random number is stored for this purpose. The session cookie is automatically removed when the browser is closed.
If you do not wish to accept cookies on your computer (or another device), you can deactivate them in your Internet browser. However, this may impair the user-friendliness and functionality of the website. The legal basis for the processing of data by cookies for the purpose of operating the website is Art. 6 para. 1 lit. f GDPR.
Our website uses the following cookies:

1. Fe_typo_user
   Session cookie for Typo3 user management
   This cookie is only relevant for web administrators. No personal data will be processed.
2. PHPSESSID
   Session cookie for operating a PHP website
   It is used to recognise your browser for various purposes (for example to remember your language setting). Save time: as long as the browser window is open.
3. retinaSupport
   The cookie remembers whether your screen has retinal resolution.
   Storage time: 4 weeks.
4. i18next
   Session cookie for animation purposes on the homepage. No personal data is stored.

Version from 2022-07-07