NAME AND ADRESS OF THE PERSON RESPONSIBLE (CONTROLLER)
The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations:
Bremer Baumwollbörse (Bremen Cotton Exchange)
Commercial association with legal capacity under German law
Chair: Stephanie Silber
Telephone: +49 (0)421-339 700
Telefax: +49 (0)421-339 7033
Contact details of the data protection officer:
When contacting the data protection officer, please name the company to which your request relates.
Please refrain from sending sensitive information such as e.g. to attach a copy of your ID.
I. GENERAL INFORMATION ON DATA PROCESSING
We only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. The collection and use of personal data of our users generally takes place only with the consent of the user. An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
II. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
a) Information about the browser type and version used
b) The user’s operating system
c) The Internet service provider of the user
d) The IP address of the user
e) date and time of access
f) Websites from which the user’s system reaches our website
g) Websites accessed by the user’s system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f) of the General Data Protection Regulation. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f) of the General Data Protection Regulation also lies in these purposes.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
III. USEAGE OF COOKIES
In the above-mentioned purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f) of the General Data Protection Regulation.
The following data is stored and transmitted in the cookies:
a) Language settings
b) Articles in a shopping cart
c) Log-in information
Please note that even after you have set your browser accordingly, you can be informed individually about the setting of cookies and thus also decide on their acceptance.
You will find help in the help menu of your browser under the following links:
IV. CONTACT FORM AND CONTACT BY E-MAIL
There is a contact form on our website which can be used for electronic contact. If a user chooses to communicate via this form, the data entered in the input mask will be transmitted to us and stored. The collected data can be found in the respective input mask.
At the time the message is sent, the following data is also stored:
a) The IP address of the user
(a) the date and time of registration
Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.
Alternatively, you can contact us via the e-mail address provided under point 1. In this case, the user’s personal data transmitted by e-mail will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of data is Art. 6 para. 1 lit. a) of the General Data Protection Regulation if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) of the General Data Protection Regulation. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 lit. b) of the General Data Protection Regulation.
The processing of the personal data from the input mask serves only for the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the right to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such case, the conversation cannot be continued.
The revocation can be made by informal declaration to the e-mail address mentioned under point 1. All personal data stored in the course of contacting us will be deleted in this case.
V. GOOGLE MAPS
This website uses Google Maps to display interactive maps and to create directions. Google Maps is a map service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website including your IP address and the (start) address entered in the route planner function can be transmitted to Google in the USA. When you visit a website on our website that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is transmitted by Google directly to your browser and integrated into the website. Therefore, we have no influence on the amount of data collected by Google in this way. According to our knowledge this is at least the following data:
the date and time of the visit to the website concerned,
Internet address or URL of the called website,
IP address, (start) address entered as part of route planning.
We have no influence on the further processing and use of the data by Google and can therefore assume no responsibility for this.
The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights and setting options for the protection of your privacy can be found in the data protection information from Google (https://policies.google.com/privacy?hl=en).
You must give separate permission for the use of Google Maps. The legal basis is then Art. 6 para. 1 lit. a) DSGVO. You can revoke this consent at any time by sending an e-mail to the e-mail address given in the imprint with effect for the future.
VI. RIGHTS OF THE DATA SUBJECT
If your personal data is processed, you are affected within the meaning of the Basic Data Protection Regulation and you have the following rights vis-à-vis the person responsible:
1. Right to information
You can ask the data controller to confirm whether personal data concerning you is being processed by the data controller. Additionally, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as correction of the data or the existence of a right of appeal to a supervisory authority.
2. Right to limitation of processing
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested is being confirmed, if you refuse to have your data deleted due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after we have achieved the purpose or if you have filed an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail.
If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction has been limited, you will be informed by the person responsible before the restriction is lifted.
3. Right to deletion
You can demand that the person responsible delete the personal data concerning you immediately if and to the extent that the conditions for deletion are fulfilled. The person responsible is obliged to delete this data immediately.
If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 DSGVO, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
The right to cancellation does not exist insofar as the processing is necessary
(1) to exercise freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h) and i and Art. 9 para. 3 of the General Data Protection Regulation;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 of the General Data Protection Regulation, insofar as the law referred to under a) is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
(5) to assert, exercise or defend legal claims.
4. Right to information
You have the right to be informed by the controller of the recipient whom the controller has informed that you have asserted your right to rectification, cancellation or limitation of the processing against the controller.
5. Right to data transferability
You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format.
6. Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6 para. 1 lit e) or f) of the General Data Protection Regulation; this also applies to profiling based on these provisions.
7. Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
8. Right to non-automated decision in individual cases including profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner.
9. Right to appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the General Data Protection Regulation.