I. Name and Address of the Controller

The Controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, and other data protection provisions, is:
BEWITAL petfood GmbH & Co. KG
Industriestraße 10
46354 Südlohn-Oeding
Germany
Tel.: +49 (0) 2862 581-0
E-Mail: info(at)bewital.de
Website: www.bewital-petfood.com

II. Name and Address of the Data Protection Officer

The Data Protection Officer of the Controller is:
Markus Olbring
comdatis it-consulting
Deventer Weg 8
48683 Ahaus
Germany 
Tel.: +49 (0) 2561 7569986
E-Mail: datenschutz(at)bewital.de
Website: www.comdatis.de

III. General Data Processing Information

1. Extent of the Processing of Personal Data

We generally only process personal data of our users if this is necessary for the provision of a functioning website, and our content and services. As a rule, the processing of personal data of our users will only take place with the consent of the user. An exception applies in such cases in which the prior obtainment of consent is not possible for practical reasons, and the processing of data is permitted by statutory provisions.

2. Legal Basis for the Processing of Personal Data

If we obtain consent from the data subject for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as a legal basis.

Art. 6(1)(b) GDPR serves as a legal basis for the processing of personal data that is necessary for the performance of a contract of which the data subject is a contractual party. This also applies for processing contracts that are necessary for the implementation of precontractual measures.

If the processing of personal data is necessary for the fulfilment of a legal obligation that our company is subject to, Art. 6(1)(c) GDPR serves as a legal basis.

In the case that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6(1)(d) GDPR will serve as a legal basis.

If the processing is necessary for the safeguarding of a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6(1)(f) GDPR will serve as a legal basis for the processing.

3. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to apply. A storage can also take place if this is provided by the European or national legislators in Union law regulations, laws or other provisions to which the Controller is subject. A blocking or deletion of data will take place when a retention period provided by the named standards expires, unless the necessity of later storage of the data exists for the conclusion or performance of a contract.

IV. Provision of the Website and Creation of Log Files

1. Description and Extent of the Data Processing

Whenever our website is accessed, our system will log automated data and information about the computing system of the accessing computer.

The following data is hereby collected:

• Information about the browser type and version used
• The operating system of the user
• The internet service provider of the user
• The IP address of the user
• Date and time of access
• Websites from which the system of the user reaches our website
• Websites that are accessed by the system of the user via our website

The data will also be stored in the log files in our system. This data will not be stored with other personal data of the user.

2. Legal Basis for the Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.

3. Purpose of the Data Processing

The temporary storage of the IP address by the system is necessary to enable the supply of website to the computer of the user. For this purpose, the IP address of the user must be stored for the duration of the session. The storage in log files takes place in order to ensure the functionality of the website. In addition, the data enables us to optimise the website and ensure the security of our information systems. An analysis of the data for marketing purposes in this context does not take place. Our legitimate interest in data processing is also part of these purposes in accordance with Art. 6(1)(f) GDPR.

4. Duration of the Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In cases of data collection for the provision of the website, this is the case when the respective session is finished. In the case of the storage of data in log files, this is the case after seven days at the latest. Storage beyond this time period is possible. In this case, the IP addresses of the users are deleted or distorted, so that a matching of the accessing client is no longer possible.

5. Objection and Removal

The collection of data for the provision of the website and the storage of data in log files is vital for the operation of the website. There is no possibility of objection for the user.

V. Use of Cookies

a) Description and Scope of the Data Processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the computer system of the user. When a user displays a website, a cookie can be stored in the operating system of the user. This cookie will contain a distinctive character sequence that enables a clear identification of the browser when the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to also be identified after changing pages.
The following data is stored and sent in the cookies:

• Language settings
• Log-in information

We also use cookies on our website that enable an analysis of the surfing behaviour of the users.
The following data can be sent in this manner:

• Search terms entered
• Frequency of site access
• Use of website functions

The user data collected in this manner will be pseudonymised by technical precautions. Therefore, it will no longer be possible to match the data to the accessing user. The data will not be stored together with other personal data of the user. When accessing our website, the users will be informed via an info banner about the use of cookies for analysis purposes and referred to this data privacy statement. In this regard, there will be a note on how to prevent the storage of cookies in the browser settings.

b) Legal Basis for the Data Processing
The legal basis for the processing of personal data with the use of cookies is Art. 6(1)(f) GDPR.

c) Purpose of the data processing
The purpose of the use of technically necessary cookies is to simplify the use of websites for the users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to also be recognised after a page change.
We require cookies for the following uses:

• Implementation of language settings
• Noting of search terms

The user data collected by technically necessary cookies will not be used to create user profiles. The use of the analysis cookies is for the purpose of improving the quality of our website and its content. Via the analysis cookies, we find out how the website is used and we can therefore constantly optimise our offering. Our legitimate interest in the processing of personal data is also part of these purposes in accordance with Art. 6(1)(f) GDPR.

d) Duration of the Storage, Revocation and Rectification
Cookies are stored on the computer of the user, from which they are sent to our site. Therefore, as the user you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies already stored can be deleted at any time. This can also take place automatically. If cookies for our website are deactivated, it may not be possible any more for all functions of the website to be used to their full extent. The transfer of Flash cookies cannot be prevented via the browser settings, but by changing the settings of the Flash Player.

VI. Newsletter

1. Description and Extent of the Data Processing

On our website, there is an opportunity to subscribe to a free newsletter. When registering for the newsletter, the data will thereby be sent to us in the input mask. This data is as follows:

• Firstname
• Lastname
• Email address
• Interests

The following data will also be collected upon registration:

• IP address of the accessing computer
• Date and time of the registration

For the processing of the data, your consent will be obtained during the registration process and you will be referred to this data privacy statement. The newsletter transmission will take place based on the sale of goods or services: If you purchase goods or services on our website and hereby leave your email address, it can be used by us afterwards to send a newsletter. In such a case, the newsletter will only contain direct advertisement for our own similar goods or services. No data is passed on to third parties in connection with the data processing for the sending of newsletters. The data is only used to send the newsletter.

2. Legal Basis for the Data Processing

The newsletter transmission will take place based on the registration of the user on the website: The legal basis for the processing of the data after registration for the newsletter by the user is, if the user’s consent has been granted, Art. 6(1)(a) GDPR.

3. Purpose of the Data Processing

The collection of the email address of the user serves to send the newsletter. The newsletter transmission will take place based on the registration of the user on the website: The collection of other personal data within the framework of the registration process serves to prevent a misuse of the services or the email address used.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The email address of the user will therefore be stored for as long as the subscription to the newsletter is active. The newsletter transmission will take place based on the registration of the user on the website: The other personal data collected within the framework of the registration process will generally be deleted after a period of seven days.

5. Objection and Removal

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter. The newsletter transmission will take place based on the registration of the user on the website: This also enables a withdrawal of the consent to the storage of the personal data collected during the registration process.

VII. Google Analytics

1. Description and Extent of the Data Processing

This website uses Google Analytics, a website analysis service by Google Inc. (“Google“). Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website will generally be sent to a Google server in the USA, where it will be stored. However, in the case of an activation of the IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states in the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be sent to a Google server in the USA, where it will be shortened. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports about the website activities, and provide further services associated with the website use and internet use to the website operator. The IP address sent from your browser within the framework of Google Analytics will not be matched with other data by Google. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

2. Legal Basis for the Data Processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR, and 15(3) TMG.

3. Purpose of the Data Processing

Google will use this information on our behalf to analyse the use of our online offering by the user, compile reports about the activities within this online offering, and provide us with further services associated with the use of this online offering and internet use. Pseudonymous use profiles of the users can be created from the processed data.

4. Dauer der Speicherung

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection.

5. Revocation and Removal

Users can prevent the storage of the cookies by setting its browser software correspondingly; the users can also prevent the logging of the data generated by the cookie and related to their use of the online offering, and its transmission to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available using the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on deactivate Google Analytics to prevent Google Analytics from recording data about you within this website. By clicking on the link above, you will download an “opt-out cookie”. Your browser must therefore generally allow the storage of cookies for this purpose. If you delete your cookies regularly, it will be necessary to click on the link again every time you visit this website.

VIII. Contact Form and Email Contract

1. Description and Extent of the Data Processing

On our website, there is a contact form that can be used for electronic contact. If a user uses this method, the data entered in the input mask will be sent to us and stored. This data is as follows:

• Firstname
• Lastname
• Street/No.
• Postal code/City
• Telephone
• Email
• Free text
• How did you find us

The following data will also be stored upon the sending of the message:

• The IP address of the user
• Date and time of the registration

For the processing of the data, your consent will be obtained during the dispatch process and you will be referred to this data privacy statement Alternatively, contact via the email address provided is possible. In this case, the personal data of the user sent with the email will be stored. In this regard, no data will be passed on to third parties. The data will only be used to process the conversation.

2. Legal Basis for the Data Processing

The legal basis for the processing of the data is, if consent has been granted by the user, Art. 6(1)(a) GDPR. The legal basis for the processing of the data that is sent in the course of the transmission of an email is Art. 6(1)(f) GDPR. If the objective of the email contact is to conclude a contract, Art. 6(1)(b) GDPR is an additional legal basis for the processing.

3. Purpose of the Data Processing

The processing of the personal data from the input mask is only for us to process the contact. In the case of contact via email, the necessary legitimate interest in the processing of the data is also part of this purpose. The other personal data collected during the dispatch process serves to prevent a misuse of the contact form and ensure the security of our information technology systems.

4. Duration of the Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input mask of the contact form and that which is sent via email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be gathered from the circumstances that the matter concerned has been conclusively clarified. The personal data additionally collected during the dispatch process will be deleted after a period of seven days at the latest.

5. Objection and Removal

The user has the opportunity at any time to withdraw its consent to the processing of personal data. If the user contacts us via email, it can object at any time to the storage of its personal data. In such a case, the conversation cannot be continued. The user has the opportunity at any time to withdraw its consent to the processing of personal data. If the user contacts us via email, it can object at any time to the storage of its personal data. In such a case, the conversation cannot be continued. Contact address: agri(at)bewital.de All personal data that has been stored in the course of the contact will be deleted in this case.

IX. Google Maps

1. Description and Extent of the Data Processing

This website uses a Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For the use of the functions of Google Maps, it is necessary to store your IP address. This information will generally be sent to a server in the USA, where it will be stored. The provider of this site has no influence on this data transfer

2. Legal Basis for the Data Processing

The purpose of this data processing represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

3. Purpose of the Data Processing

The use of Google Maps takes place in the interest of an appealing presentation of our online offering and easy traceability of the places indicated by us on the website.

4. Duration of the Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The personal data additionally collected during the transmission process will be deleted after a period of seven days at the latest.

5. Objection and Removal

Users can prevent the storage of the cookies by setting their browser software correspondingly; the users can also prevent the logging of the data generated by the cookie and related to their use of the online offering, and its transmission to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available using the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on this link to prevent Google Maps from recording data about you within this website. By clicking on the link above, you will download an “opt-out cookie”. Your browser must therefore generally allow the storage of cookies for this purpose. If you delete your cookies regularly, it will be necessary to click on the link again every time you visit this website. More information about the handling of user data can be found in the Google data privacy statement: https://www.google.de/intl/de/policies/privacy/. This website uses a Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For the use of the functions of Google Maps, it is necessary to store your IP address. This information will generally be sent to a Google server in the USA, where it will be stored. The provider of this site has no influence on this data transfer. The use of Google Maps takes place in the interest of an appealing presentation of our online offering and easy traceability of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR. More information about the handling of user data can be found in the Google data privacy statement: https://www.google.de/intl/de/policies/privacy/.

X. Rights of the Data Subject

If personal data about you is processed, you are a data subject within the meaning of the GDPR, and you have the following rights, to which the controller is subject:

1. Right of Access

You can request confirmation from the Controller of whether personal data concerning you is processed by us.
If such processing takes place, you can request the following information from the Controller:

1. the purposes for which the personal data is processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipient to whom the personal data about you has been or is will be disclosed;
4. the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
5. the existence of a right to request from the controller rectification or erasure of personal data or restriction in the processing of personal data concerning you, or to object to such processing;
6. the right to lodge a complaint with a supervisory authority;
7. where the personal data is not collected from you, any available information as to its source;
8. the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information about whether the personal data concerning you is sent to a third country or an international organisation. In this context, you can request that you be informed of the appropriate safeguards in accordance with Art. 46 GDPR in relation to the transfer.

2. Right to Rectification

You have the right to obtain rectification and/or completion from the controller if the personal data processed concerning you is inaccurate or incomplete. The controller must carry out the rectification without undue delay.

3. Right to Restriction of Processing

You can demand restriction of the processing of the personal data concerning you under the following conditions:

1. if the accuracy of the personal data concerning you is contested by you for a period that enables the controller to verify the accuracy of the personal data;
2. if the processing is unlawful and you oppose the erasure of the personal data, and request the restriction of the use of the personal data instead;
3. the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims, or
4. if you have objected to the processing in pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds. If the processing of the personal data concerning you has been restricted, this data – with the sole exception of its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the processing has been restricted in accordance with the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.

4. Right to Erasure

a) Erasure obligation
You can request that the controller erase the personal data concerning you without undue delay, and the controller will be obliged to erase this data without undue delay, if one of the following grounds applies:

1. the personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
2. you withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and where there is no other legal ground for the processing;
3. you object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR;
4. the personal data concerning you has been unlawfully processed;
5. the personal data concerning you has to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;
6. the personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.

b) Information to third parties
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase it, the controller, taking account of available technology and the cost of the implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by these controllers of any links to, or copy or replication of, this personal data.

c) Exceptions
The right to erasure does not exist if the processing is necessary:

1. for exercising the right to freedom of expression and information;
2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes in accordance with Art. 89(1) GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
5. for the establishment, exercise or defence of legal claims.

5. Right to Information

If you have exercised your right to the correction, erasure or restriction of the processing against the controller, it is obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data, or restriction of the processing, unless this proves to be impossible or involves disproportionate effort.
You have the right to be informed by the controller of these recipients.

6. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly-used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where:

1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR; and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other people may not hereby be impaired. The right to data portability does not apply to processing personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies for profiling based on those provisions. The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is for the establishment, exercise or defence of legal claims. Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. In the context of the use of information society services – irrespective of Directive 2002/58/EG – you may exercise your right to object by automatic means using technical specifications.

8. Right to Withdraw the Declaration of Consent under Data Protection Law

You have the right to withdraw your declaration of consent under data protection law at any time. By revoking the consent, the legal validity of the processing carried out based on the consent until the revocation will not be affected.

9. Automated Individual Decision-making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly impairs you, if the decision

1. is necessary for entering into, or the performance of, a contract between you and the controller,
2. is authorised by legal provisions of the Union or Member State to which the controller is subject and if these legal provisions also lay down suitable measures to safeguard your rights and freedoms, and legitimate interests; or
3. is based on your explicit consent.

However, these decisions may not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures to safeguard the rights and freedoms and your legitimate interests are in place. Regarding the cases named in (1) and (3), the controller will take suitable measures to protect the rights and freedoms, and your legitimate interests, which will also include at least the right to effect the intervention of a person on the part of the controller, presentation of your own point of view, and the appeal of the decision.

10. Right to Complain to a Supervisory Authority

Notwithstanding any other judicial remedy under administrative law or in court, you have the right to complain to a supervisory authority, particularly in the member state of your habitual residence, your place of work, or the place in which the alleged violation took place, if you are of the opinion that the processing of the personal data concerning you violates the GDPR. The supervisory authority to which the complaint is submitted will inform the complainant of the progress and outcome of the complaint, including the possibility of judicial remedy in accordance with Art. 78 GDPR.