Google Analytics & Data Protection

1. Responsible body and data security

Responsible body
The body responsible for data processing on this website is:

Bulthaup GmbH & Co KG
Aich, Werkstraße 6
84155 Bodenkirchen
Tel. +49 (0)8741 80 0
Email: datenschutz@bulthaup.com

Data protection
This website uses TLS (transport layer security) encryption for security reasons and to protect the transfer of confidential information, such as orders or requests which you send to us as the site operator. An encrypted connection can be recognized when the browser’s address line changes from “http://” to “https://” and by the padlock symbol in the browser line.

2. Collection of data on our website

Cookies
Cookies are used in some of this website. They do not harm your PC or contain any viruses. Cookies make our website easier to use and more effective and secure. They are small text files which are placed onto your computer and saved by your Internet browser.
Most of the cookies we use are so-called “session cookies”. They are used to optimize user-friendliness and automatically deleted after your visit. We also use temporary cookies to optimize user-friendliness, which remain on your computer until deleted. These cookies allow us to recognize your browser on your next visit.
We also use cookies to collect statistical data about the use of our website, which are then analyzed to optimize our services for you (see section 4).
Your browser settings include options to inform you when cookies are placed on your computer, to only allow cookies on an individual basis, to accept cookies in particular cases or generally reject cookies and to turn off automatic cookie deletion when you close your browser. Deactivating cookies may restrict the functionality of this website.
Data processing via cookies is legally governed by Article 6 (1) (f) General Data Protection Regulation (GDPR).

Server log files
The site provider automatically collects and saves information in server log files, which your browser then automatically transfers to us. This information includes:
• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is processed to ensure you connect to the website seamlessly, can comfortably use our website, to analyze system security and stability and for other administrative purposes. This data will not be merged with other data sources.
This data processing is legally governed by Article 6 (1) (f) GDPR.

Contact forms
If you send a request to a bulthaup partner via the “contact form” page, we will transmit your request and the data notified with it to the bulthaup partner. This will be done only for the purposes stated in the declaration of consent.
The declaration of consent which you can provide in these forms (but do not have to) has the following content:
Consent regarding data protection legislation:

Data Privacy Notice:
I agree to my above request and the data notified with it being transmitted by Bulthaup GmbH & Co KG as controller to the bulthaup partner stated in the legal information and to them being stored and used by bulthaup and the relevant partner for the purposes of responding to my request by e-mail and of sending bulthaup product information and associated service offerings by post, as well as for market research purposes.
Please note: Without your consent, your request will not receive a response. The data provided in the contact form will be processed on the basis of your consent (Article 6 (1) lit. a GDPR). You can revoke your consent to the processing and use of your data for the specified purposes at any time. Please direct any revocation to Bulthaup GmbH & Co KG, FAO Data Protection, 84155 Aich, Germany or send an e-mail to datenschutz@bulthaup.com. We will inform the relevant partner of your revocation.

The data which you input in these contact forms will remain stored until you ask us to delete them or until you revoke your consent with regard to storage.

3. Social media

Sharing content via plug-ins (Facebook, Pinterest)
So-called “social plug-ins” are used on our website to raise awareness of our company pursuant to Article 6 (1) (f) GDPR. We currently use plug-ins from Facebook and Pinterest. Data, including personal data, may be sent via these plug-ins to service providers in the USA and potentially used by these service providers.

bulthaup does not collect any personal data via the social plug-ins or any personal data about the use of plug-ins. A program prevents data from being transmitted to the service provider in the USA without the user’s knowledge. This solution ensures that for the moment, no personal data is transferred to the provider of the social plug-in when you visit bulthaup’s websites. Data can only be transmitted to the service provider and stored there if you click on one of the social plug-ins.

Access by the service provider
The service provider then receives the information that you have accessed the corresponding sub-page of our website. This happens regardless of whether you have an account with the service provider and whether you are logged in. If you are logged in to the service provider this will be directly assigned to your account. If you click on one of the social plug-ins and, for example, link this website, the service provider will also store this information in your user account and publicly share this association.

If you do not wish this assignment to your profile with the service provider you must log out before clicking on one of the social plug-ins.

We have no influence over whether and to what extent the service provider collects personal data. The scope, purpose and storage period of the collected data is also unknown. It must be assumed that, at a minimum, the IP address and information related to the device used are collected and used. It is also possible that the service provider uses cookies.

Service providers’ details
More information about how the service providers deal with data protection can be found on their websites:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
https://www.facebook.com/policies

Further information about the collection of data:
http://www.facebook.com/help/186325668085084

4. Analytical tools and advertising

We use the following tracking measures pursuant to Article 6 (1) sentence 1 (f) GDPR. We aim to ensure these tracking measures support the needs-based design and continued optimization of our website. We also use tracking measures to collect statistical data about how our website is used, which is then analyzed to optimize our services for you.
The respective purpose of data processing and data categories are to be taken from the respective tracking tools.

Google Analytics
This website uses the functions of the Google Analytics web analysis service. This is provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA. Google Analytics uses cookies. These are text files which are saved on your computer and enable your use of the website to be analyzed. The information generated by the cookie regarding your use of this website, such as browser type/version, operating system used, referrer URL (the website you previously visited), host name of the access computer (IP address) and the time of the server request, is usually transmitted to Google’s server in the USA and saved there.

We have activated IP anonymization on this website. Your IP address is truncated by Google within the member states of the European Union or in other signatory states party to this agreement across the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google uses this information to analyze your use of the website with the aim of generating reports on website activities and providing the site operator with other services associated with website and Internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be linked to other data held by Google.

You can prevent the saving of cookies by selecting the appropriate setting in your browser software; however, please note that doing so may preclude access to all functions of this website. You can also prevent the collection of data generated by the cookie and related to the usage of the web site (including your IP address) by Google and the processing of such data by Google by downloading and installing the browser plug-in, which is available at: https://tools.google.com/dlpage/gaoptout?hl=en.

You can prevent the transfer of your data by Google Analytics by clicking the following link: This installs an opt-out cookie, which prevents your data from being collected when you visit this website in futureDeactivate Google Analytics.
More information about how Google Analytics interacts with your user data can be found in Google’s Privacy Policy. https://support.google.com/analytics/answer/6004245?hl=en.
We have entered into a data processing agreement with Google.

Google Analytics remarketing
Our websites also use the functions of Google Analytics remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.

This function enables advertising target groups created by Google Analytics remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. Accordingly, interest-related and personalized adverts are shown, which have been adapted in accordance with your previous usage behavior and surfing habits on one device (e.g. cellphone) and also shown on another of your devices (e.g. tablet or PC).

If you have provided the appropriate consent, Google will link your web and app browser histories with your Google account. This allows every device which you log in to with your Google account to have the same personalized adverts shown.

To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to your Google Analytics data to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account. Please visit the following to do so: https://www.google.com/settings/ads/onweb/.

A potential summary of the data collected in your Google account is only carried out on the basis of your consent, which you can provide to or withdraw from Google (Article 6 (1) (a) GDPR).

More information and data protection information can be found in the Google Privacy Policy and Terms at: https://policies.google.com/technologies/ads?hl=en.

5. Plug-ins and tools

YouTube
Our website uses plug-ins from the website YouTube, which is operated by Google. The operator of this website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our web pages equipped with a YouTube plug-in, a connection is made to the YouTube servers. This will notify the YouTube servers which of our web pages you have visited.
If you are logged in to your YouTube account, this will allow YouTube to directly associate your browsing habits with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube to display our websites in a more appealing manner. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.
More information about how YouTube interacts with your user data can be found in YouTube’s Privacy Policy. https://www.google.de/intl/en/policies/privacy.

Monotype Web Fonts
This website uses web fonts to uniformly display fonts, which are provided by Monotype Imaging Holdings Inc., a Delaware corporation with its principal offices at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA. When accessing a web page, your browser loads the required web fonts in your browser cache to show text and fonts correctly.
For this purpose, your browser must connect to Monotype’s server. This informs Monotype that your IP address accessed our website. We use Monotype web fonts to display our websites in a uniform and appealing manner. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.
If your browser does not support web fonts, your computer will use a standard font.
More information about Monotype web fonts can be found in the Legal section at https://www.fonts.com/info/legal and in Monotype’s Privacy Policy at https://www.fonts.com/info/legal/privacy.

Google Maps
This website uses an API from the map service Google Maps. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.
It is necessary to store your IP address to use the functions of Google Maps. This information is usually transmitted to Google’s server in the USA and stored there. The site operator has no influence over this transmission of data.
We use Google Maps to display our websites in an appealing manner and help customers find our locations stated on the website. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.
More information about how Google interacts with your user data can be found in Google’s Privacy Policy. https://www.google.de/intl/en/policies/privacy/.

6. Rights in accordance with the General Data Protection Regulation

In accordance with the EU General Data Protection Regulation, you have a right of access (Article 15), a right to rectification and erasure (Articles 16, 17), the right to restrict processing (Article 18) and a right to data portability (Article 20), as well as the right to lodge a complaint with a supervisory authority (Article 77).
If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, if justified due to reasons pertaining to your specific circumstances or if you are objecting to direct advertising. If you are objecting to advertising, you have a general right to object, which will be implemented by us without you having to provide details about your particular situation.
If you wish to exercise your right to withdraw your consent or object, it is sufficient to send an datenschutz@bulthaup.com.

7. Up-to-dateness of and changes to this Privacy Policy

This Privacy Policy is currently valid as of May 2018.
It may be necessary to make changes to this Privacy Policy due to further development of our website and services offered there, or on the basis of changes in legislation or to regulatory requirements.
© Copyright Bulthaup GmbH & Co KG, Bodenkirchen (Germany). All rights reserved.