Privacy Provisions

Privacy Policy

I. General information

(1) In the following, we provide information about the collection of personal data when using our website in accordance with Art. 13 GDPR. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is the

Bayerische Milchindustrie eG
E.ON-Allee 1
84036 Landshut
E-Mail: bmi@bmi-eg.com

You can reach our data protection officer at

Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH
Eifelstrasse 55
93057 Regensburg
E-mail: kontakt@buglundkollegen.de

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

II. Your rights

(1) You have the following rights with regard to your personal data:

•    Right to information,
•    Right to rectification or erasure,
•    Right to restriction of processing,
•    Right to object to the processing,
•    Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

You can find the competent supervisory authority for data protection issues here.

III Hosting

(1) The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online offering.

(2) We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing contract).

IV. Accessing the website

(1) If you use the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

•    IP address
•    Date and time of the enquiry
•    Time zone difference to Greenwich Mean Time (GMT)
•    Content of the request (specific page)
•    Access status/HTTP status code
•    Amount of data transferred in each case
•    Website from which the request comes
•    Browser
•    Operating system and its interface
•    Language and version of the browser software.

We collect and store this data on the basis of our legitimate interest for a limited period of time in order to initiate a derivation of personal data in the event of unauthorised access or attempted access to local servers (Art. 6 para. 1 lit. f GDPR).

V. Use of cookies

(1) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). They are used to make the website more user-friendly and effective overall.

(2) We distinguish between two categories of cookies: (a) essential cookies, without which the functionality of our website would be limited, and (b) optional cookies for statistical purposes.

The use of optional cookies is based on your consent (Art. 6 para. 1 lit. a GDPR).

In the following link and the subsequent paragraphs, we describe the optional cookies used on this website in detail:

VI Use of Matomo

a. Nature and purpose of the processing

This website uses Matomo (formerly Piwik), an open source software for the statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website is stored on our server in Germany, as we host Matomo ourselves. The IP address is anonymised immediately after processing and before it is stored. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website. You can decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyse various statistical data. You can find more information on the privacy settings of the Matomo software at the following link: matomo.org/docs/privacy/.

b. Legal basis of the processing

The data is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

•    Time of the user's previous visit
•    Screen resolution
•    Files clicked or downloaded
•    Links to outside the domain clicked
•    User identification
•    Page speed
•    Page URL
•    Number of visits by users
•    User agent
•    Browser information
•    Time zone
•    Time of the user's first visit
•    Date and time of the visit
•    Page title
•    Referrer URL
•    Usage data
•    Device information
•    Geographical location
•    IP address (anonymised)

d. Recipient

The recipients of the data are internal employees of BMI eG. As we host Matomo ourselves, no connection to the Matomo servers is established.

e. Storage periods

The data will be deleted as soon as it is no longer required for our recording purposes or you have withdrawn your consent.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent.

g. Third country transfer

Although Matomo is based in New Zealand, all data is hosted by Matomo on our own servers located in Germany.
The processing therefore does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. To do this, you can change the cookie settings via our cookie banner.

i. Automated decision-making and profiling

With the help of the tracking tool Matomo, the behaviour of visitors to the website can be evaluated and their interests analysed. We create a pseudonymised user profile for this purpose.


VII Online presence in social media

We maintain online presences within social networks in order to inform the users active there about our services and to communicate directly via the platforms if there is interest. We are currently represented on the following networks:

Facebook: de-de.facebook.com/Bayerische.Milchindustrie/

Facebook can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website that the respective networks offer for embedding the offers on websites.

We have no influence on the collection of data and its further use by the social networks. For example, we have no knowledge of the extent to which, where and for how long the data is stored, the extent to which the networks comply with existing deletion obligations, which analyses and links are made with the data and to whom the data is passed on. We therefore expressly draw your attention to the fact that user data (e.g. personal information, IP address) is stored by the network operators in accordance with their data usage guidelines and used for business purposes.

We process the data of users in the social media presences insofar as they contact and communicate with us via comments or direct messages, for example.

The legal basis for the processing of the user's data is Art. 6 para. 1 lit. b and f GDPR.

Facebook

You can access the Facebook social media network via external links on our website. All functions in the social media network are offered by Meta Platforms Ireland Ltd. The Facebook channels can only be accessed via an external link.

If you are logged into Facebook with your own profile and access our social media channel, Facebook can assign your visit to your logged-in profile. If you do not wish your user account to be associated with your IP address, please log out of your Facebook account before using our website.

For further information on the processing of your data, please refer to Facebook's privacy policy: facebook.com/privacy/explanation and to our "Facebook Fanpage" data policy