Data protection
1) The Controller’s Information on Collecting Personal Data and Contact Data
1.1 We are delighted that you visit our website and thank you for your interest. The following contains information on how we handle your personal data when you use our website. Personal data means all data with which you can be identified personally.
1.2 The controller of data processing on this website as defined in the General Data Protection Regulation (GDPR) is “werkhaus GmbH & Co. KG, Rosenheimer Straße 32, 83064 Raubling, 08035 – 907 – 0, info@werkhaus.cc”. The controller for processing personal data is the natural person or legal entity who alone or together with others decides the purposes and methods of processing personal data.
1.3 The controller has appointed a Data Protection Officer for this website, who can be reached at:
“Bernhard Johne, Rosenheimer Straße 33, 83064 Raubling, +498035907168, dataprotection@bora.com”
1.4 For security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or requests sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection from the character string “https://” and the padlock symbol in your browser toolbar.
2) Data Capture When Visiting Our Website
If you visit our website for information purposes only, i.e. if you do not register with us or share information with us in any other way, we collect only the personal data that your browser transfers to our server (“server log files”). If you access our website, we collect the following data, which is a technical requirement for us to be able to display the website to you:
The website visited
Date and time at the moment of access
Amount of data sent in bytes
Source/reference, from where you accessed the page
Browser used
Operating system used
IP address used (if required: anonymised)
The processing is carried out pursuant to point (f) of Article 6(1) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is neither shared nor used in any other way. However, we reserve the right to check the server log files subsequently, should there be solid grounds to indicate unlawful use.
3) Cookies
To make our website attractive to visit and to enable the use of certain functions, we use cookies on various web pages. These are small text files, which are placed on your end-device. Some of the cookies we use are deleted after the end of the browser session, i.e. once your browser has closed (session cookies). Other cookies remain on your end-device and enable us or our partner companies (third-party provider cookies) to recognise your browser again on your next visit (persistent cookies). If cookies are placed, they collect and process individually certain user information, such as browser and site data, as well as IP address values. Persistent cookies are deleted automatically after a preset period, which can differ depending on the cookie.
Provided that personal data is also processed through individual cookies implemented by us, the processing is carried out pursuant to point (f) of Article 6(1) GDPR to safeguard our legitimate interests with regard to the best possible functionality of the website and a customer-friendly and effective arrangement of the website visit.
Under certain circumstances, we work with advertising partners, who help us to make our online service more interesting for you. For this purpose, cookies from partner companies are also stored on your hard disk when you visit our website (third-party cookies). If we work with the aforesaid advertising partners, you are individually and separately informed of the implementation of this type of cookie and the scope of the information collected within the paragraphs below.
Please note that you can set your browser to notify you of the placement of cookies and decide whether to accept them individually or opt out from accepting cookies in certain instances or generally. Each browser is different in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. These instructions can be found for each browser concerned at the following links:
Internet Explorer: windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: support.google.com/chrome/bin/answer.py
Safari: support.apple.com/de-de/guide/safari/sfri11471/macsupport.apple.com/kb/ph21411
Opera: help.opera.com/Windows/10.20/de/cookies.html
Please note that non-acceptance of cookies can restrict the functionality of our website.
4) Making Contact
When you contact us (e.g. through a contact form or email) personal data is collected. It is apparent from the particular contact form which data is collected. This data is stored and used exclusively for the purpose of responding to your request or contact and the associated technical administration. The legal basis for the processing of data is our legitimate interest in responding to your request pursuant to point (f) of Article 6(1) GDPR. If you are contacting us to terminate a contract, the additional legal basis for the processing is pursuant to point (b) of Article 6(1) GDPR. Your data is deleted once your request has been processed, if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no statutory data retention obligations.
5) Web Analysis Services
Google (Universal) Analytics
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). Google Analytics uses cookies, which are text files that are stored on your computer and which enable an analysis of the use of the website to be made. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the US and stored there.
This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures the anonymisation of the IP address by shortening it, and excludes a direct link to persons. Through the extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. In these exceptional cases, this processing is carried out pursuant to point (f) of Article 6(1) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to analyse your use of the website, to compile reports on website activities and to provide us with other services related to the use of the website and the internet. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by selecting the appropriate setting in your browser software; however, we would point out that in this event you may not be able to use all the functions of this website should the occasion arise. Moreover, you can prevent the capture of the data generated by the cookie and obtained by your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout
As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to place an opt-out cookie, which prevents future data capture by Google Analytics within this website (this opt-out cookie works only in your browser and only for this domain – if you delete your cookies in this browser, you need to click on this link again): Google Analytics deaktivieren
Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.
More information on how Google Analytics handles user data can be obtained from Google at: support.google.com/analytics/answer/6004245
6) Use of Social Media: Social Plugins
6.1 Facebook plugins with Shariff solution
Our website uses social plugins (“plugins”) of the Facebook social network, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, US (“Facebook”).
To enhance the protection of your data when you visit our website, these buttons are not unrestricted as plugins but are only integrated using an HTML link in the page. This type of integration guarantees that when a page of our website that contains such buttons is accessed, there is no connection made with Facebook’s servers. If you click on the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins (after entering your login data, if required).
Headquartered in the US, Facebook Inc. has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and settings options concerning the protection of your privacy can be obtained from Facebook’s data protection information: http://www.facebook.com/policy.php
6.2 YouTube
Our website uses plugins of the Google-powered page, YouTube. The site operator is the YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our sites equipped with a YouTube plugin, you will be connected to the YouTube servers. This tells the YouTube server which of our internet pages you have visited. If you are logged in to your YouTube account, you allow YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube happens in the interest of an appealing presentation of our online offer. This constitutes a legitimate interest within the meaning of article 6 para. 1 lit. F GDPR.
You can find further information on data protection with YouTube in the data protection statement of the provider at: www.google.de/intl/de/policies/privacy.
7) Google Web Fonts
This website uses web fonts for the detailed display of fonts, which are provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”).
8) Rights of the Data Subject
8.1 The applicable data protection regulation gives you rights in relation to the controller with regard to the processing of your personal data (access and intervention rights). The information below explains these rights:
Right of access pursuant to Article 15 GDPR: In particular, you have the right to information about the personal data we process that concerns you, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data is not collected from the data subject, any available information as to its source, the existence of automated decision-making, including profiling, and, as required, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject, as well as the notification obligation regarding rectification or erasure of personal data or restriction of processing information, which guarantees exist with regard to the sharing of your data with third countries pursuant to Article 46 GDPR;
Right to rectification pursuant to Article 16 GDPR: You have a right to obtain from us without undue delay the rectification and/or completion of inaccurate personal data that concerns you;
Right to erasure pursuant to Article 17 GDPR: You have the right to have your personal data erased subject to the conditions of Article 17(1) GDPR. However, this right does not apply, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, on grounds of public interest or for the establishment, exercise or defence of legal claims;
Right to restriction of processing pursuant to Article 18 GDPR: You have the right to the restriction of processing of your personal data, so long as the accuracy of the personal data contested by you is checked, if you oppose the erasure of the personal data due to improper data processing and request the restriction of its use instead; if you need your data for the establishment, exercise or defence of legal claims, since we no longer need this data for the purposes of the processing or if you objected to processing for reasons of your special situation, pending verification of whether the legitimate grounds of the controller override those of the data subject;
Notification obligation regarding rectification or erasure of personal data or restriction of processing pursuant to Article 19 GDPR: If you have asserted your right to obtain rectification, erasure or restriction of your personal data from the controller, the controller is obliged to notify all the recipients to whom the personal data affected was disclosed of this rectification or erasure of the data or the restriction of the processing, unless this proves impossible or involves disproportionate effort. You have the right to be notified of these recipients.
Right to data portability pursuant to Article 20 GDPR: You have the right to receive the personal data that concerns you, which you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transmit this data to another controller, where technically feasible.
Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw consent for processing data at any time with future effect. In the event of withdrawal, we will erase the relevant data with undue delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent up until the point of withdrawal;
Right to lodge a complaint pursuant to Article 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
8.2 Right to Object
If we process your personal data as part of a consideration of interests on the basis of our predominant legitimate interest, you have the right to object, on grounds relating to your particular situation, to the processing of personal data that concerns you with future effect.
If you exercise your right to object, we will no longer process the data concerned. However, we reserve the right to continue to process the personal data if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerned for the purpose of this sort of advertising. You can exercise the right to object as described above.
If you exercise your right to object, we will no longer process the data concerned for direct marketing purposes.
9) Duration of Storage of Personal Data
The duration of storage of personal data is measured according to the particular statutory retention period (e.g. retention periods concerning tax and commercial law). Once the period has expired, the data concerned is erased as a matter of routine, provided that it is no longer required for the fulfilment or development of a contract and/or there no longer remains a legitimate interest for further retention on our part.