The official and legally binding notes on data privacy and cookies of this website are written in German. A non-binding translation of the notes on data privacy and cookies into English is only offered as a service. In the event of any discrepancy between the English translation and the original German version or in the event of any ambiguity, only the German version of the notes on data privacy and cookies is valid.
Personal data (hereinafter referred to as "data"), as defined in Article 4(1) of the General Data Protection Regulation ((EU) 2016/679, hereinafter referred to only as "GDPR"), is collected on our website. Personal data is any data by which you can be personally identified. We treat all personal data confidentially and in accordance with the statutory data protection regulations.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.
We collect and process data both within the scope of necessity for the purpose of providing a functional and user-friendly website, including its contents and the services offered there, and in order to carry out an anonymous visitor analysis of our website and to provide statistics, for example, on frequently visited pages, visiting times or length of stay of users. In addition, we collect and process data that you provide to us, for example, via the contact form or other contact options. Details on the use of your data are explained in the data protection declaration below.
According to Article 4(1) of the GDPR, "processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
I. Information about us as the responsible party
II. rights of users and data subjects
III. Information on data processing
I. Information about us as data controllers
Responsible Party for Data Processing:
45470 Mülheim an der Ruhr
Association Register: Bonn VR 11499
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, or similar).
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right to
- to confirm whether data relating to them are being processed. If this is the case, they have the right to information about the data processed and to further information about the data processing, as well as to receive copies of the data (cf. Art. 15 GDPR);
- to have inaccurate or incomplete data corrected or completed (cf. Art. 16 GDPR);
- the immediate deletion of the data concerning them (cf. Art. 17 GDPR). The right to erasure does not apply insofar as further processing is required pursuant to Art. 17 (3) GDPR;
- to restriction of processing in accordance with Art. 18 GDPR;
- to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and to have this data transferred to other data controllers without hindrance from us (cf. Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they are of the opinion that the processing of personal data concerning them violates this Regulation (cf. Art. 77 GDPR). The right of complaint is without prejudice to other administrative or judicial remedies.
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of data concerning them, insofar as the data is processed by the provider in accordance with Art. 6 (1) e) or f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any legal obligations to retain data and no other information is provided below on individual processing procedures.
For technical reasons, in particular to ensure a secure and stable Internet presence, we collect and store data transmitted by your Internet browser to us or to our web space provider in so-called server log files. The data contain:
- Type and version of your internet browser and language,
- the operating system used,
- the website from which you accessed our website (referrer URL),
- the website(s) of our Internet presence that you visit,
- date and time of the respective access as well as
- IP address.
The data collected in this way is stored temporarily, but not together with other data about you. This storage takes place on the legal basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The IP is stored on the delivery servers for 60 days. This serves to ensure operation and protection against attacks (e.g. DDOS). The remaining server log data is deleted after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is exempt from deletion in whole or in part until final clarification of an incident.
We use only technically necessary cookies on our website. Cookies are small text files or other storage technologies that are deposited and stored on your end device by the internet browser you use. These are used to make our offer possible.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR, provided that data for contract initiation or contract processing is processed through these cookies. If the processing does not serve the purpose of contract initiation or contract processing, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) GDPR.
A distinction is made between session cookies and persistent cookies. Session cookies are deleted when you close your internet browser. Persistent cookies remain stored in your browser until they expire or are deleted. These cookies allow your settings to be automatically applied when you revisit our website.
You have the option of deactivating cookies that are not necessary via our data protection settings [LINK TO BANNER]. However, by deactivating them, you restrict the functionality of the site.
You can also prevent or restrict the setting of all cookies by adjusting your internet browser settings. You can delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Contact requests / contact options
If you contact us via contact form, social networks, telephone, e-mail, messenger service or other ways, the data you provide will be used to process your request. The provision of the data is necessary for processing and answering your enquiry - without their provision, we cannot answer your enquiry or at best only to a limited extent. The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.
Objection to advertising
The use of contact data published within the framework of the imprint obligation as well as all other contact data by third parties for the purpose of sending advertising and information material not expressly requested is hereby expressly prohibited. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, e.g. via spam mails.
Registration for events
You can revoke your consent for registration at any time with future effect according to Art. 7 para. 3 GDPR. To do this, you must inform us by post at the following address:
45470 Mülheim an der Ruhr
By registering for the Bed Exchange, you automatically create a customer account with us. The data entered for this purpose (such as your name, address or email address) is collected and stored solely for pre-contractual services, for contract fulfillment or for customer care. At the same time, we also save the IP address and the date of your registration along with the time. This data will not be disclosed to third parties.
Insofar as you consent to this processing, Art. 6 para. 1 lit. a) GDPR is the legal basis for the processing. If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 (1) (b) GDPR.
In accordance with Art. 7 (3) GDPR, you can revoke your consent to the opening and maintenance of the customer account at any time with effect for the future. To do so, you only need to inform us of your revocation. The data collected in this respect will be deleted as soon as processing is no longer necessary. In doing so, however, we must observe retention periods under tax and commercial law.
If you sign up for our free newsletter, the data you requested for this purpose, i.e. your email address and - optionally - your name as well as automatically the date and time of your registration and your IP address will be transmitted to our service provider Sendinblue, Köpenicker Straße 126, 10179 Berlin, and stored on Sendinblue's servers until you unsubscribe from our newsletter. Sendinblue is a service that can be used to organise the sending of newsletters.
In accordance with Art. 7 (3) GDPR, you can revoke your consent to receive the newsletter at any time with effect for the future. To do so, you simply need to inform us of your revocation or click on the unsubscribe link contained in each newsletter.