Privacy Policy


1. General

We appreciate your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about the handling of the processing of personal data pursuant to Article 13 of the General Data Protection Regulation (GDPR). If you have any questions or comments about this Privacy Policy, you can always contact our data protection officer at datenschutz@bac-poolsystems.com or contact the data controller,

BAC pool systems GmbH
Carl-Metz-Strasse 3
DE-76275 Ettlingen

Tel +49 7243 9496 000
Fax +49 7243 9496 111

Email
info@bac-poolsystems.com

2. The Data Subject

The concept of personal data is defined in the General Data Protection Regulation (GDPR). Pursuant to Article 4 (1) “personal data” refers to all information relating to an identified or identifiable natural person. This includes, for example, your real name, your address or your telephone number. Information about how you use this website may also constitute personal data.

3. Processing of personal data for the execution of contracts

We process personal data for the purpose of contract execution and opening a customer account, if you provide this information voluntarily in the context of an order, when contacting us (e.g. by contact form or email) or when opening a customer account, Article 6 (1) a) GDPR.

We collect personal data in order to establish or conclude a contractual relationship or to fulfil and/or terminate a contract of which you are a party, Article 6 (1) (b) GDPR. The personal data are processed in a customer file. Which data are collected, is displayed in the respective input forms. You can view and change the data stored by us in your customer account at any time.

Essentially, these refer to the following data:

• First name, surname
• Billing and delivery address
• Email address
• Telephone number
• Invoice and payment data

For fulfilment of the contract, we will forward your email address and, if applicable, your telephone number to the logistics company commissioned by us, insofar as this is necessary for the delivery of ordered goods and you provided your consent during or after the order process. Therefore, the logistics company may contact you for the purpose of delivery coordination or announcement of the delivery itself.

The consent given for this purpose can be revoked at any time vis-à-vis us or the logistics company. In case of a revocation, which you feel merits an explanation, can be sent either by email or post to the contact address specified in the Legal Notice. If you want to address the revocation to our logistics company, we will provide you with the contact details of the respective logistics partner upon request.

Insofar as necessary, we shall verify your identity on the legal basis of Article 6 (1) b) and f) GDPR, using information from service providers. The entitlement to this arises from prevention of attempted fraud at our expense. The circumstance and the result of our inquiry will be added to your customer account or your guest account for the duration of the contractual relationship.

If we make advance payments, we reserve the right, in order to safeguard our legitimate interests, to obtain identity and credit information from specialized service companies (credit reference agencies). For this purpose, we will transfer your personal data required for a credit check to the following company:

arvato infoscore GmbH
Rheinstraße 99
76532 Baden-Baden

The credit report may contain probability values ​​(score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. We use the information obtained on the statistical probability of a default to reach an informed decision on the establishment, implementation or termination of the contractual relationship. Those of your interests that merit protection are taken into account in accordance with legal provisions.

The legal basis of these transfers is formed by Article 6 (1) b) and Article 6 (1) f) GDPR. Transfers based on these provisions may only be made to the extent necessary to safeguard the legitimate interests of our company or third parties, and not to outweigh the interests of the data subject's fundamental rights and freedoms that mandate the protection of personal data.

You have the opportunity to present your position to the company mentioned above and to challenge the decision.  

We may store the data collected for the execution of the contract until expiry of the statutory warranty, potential contractual warranty and guarantee rights. After expiry of this period, we shall retain the information pertaining to the contractual relationship, as required under commercial and tax law, for the periods specified by law. For this period (normally ten years from the conclusion of the contract), the data will be reprocessed only in case of a review by the tax authorities.

On the basis of Article 6 (1) f) GDPR, we enjoy a legitimate interest in informing you about improvements to the existing contractual relationship in the event of improved internal processes and to provide you with product information.

4. Personal data processing during website visits

When visiting our website, our system automatically collects data and information from the computer system of the connecting computer:

- Browser type/version
- operating system
- referrer URL
- IP address
- time of server request  

The data is also stored in the log files of our system. Retention of this data, together with other personal data of the user, does not occur. The collection and storage of the data in the log files serves the logging of prevented or malicious website access as well as the security and stability of our website. The basis for this is Article 6 (1) f) GDPR. For the other purposes mentioned, our legitimate interest lies in the processing of data within the meaning of Article 6 (1) f) GDPR. The data will be deleted as soon as they are no longer necessary to achieve the original purpose of collection.   

- Cookies  

We use cookies on our website. Cookies are small text files that are stored on your computer when you visit our website and enable reassignment of your browser. Cookies store information, such as your language setting, the duration of your visit to our website or the data entries you make there. Based on this information, our system can immediately recognize the connecting computer and make the information directly available according to the preferences you have set. This does not give us direct knowledge of your identity. We use cookies for the proper operation of the website, for the provision of basic functionalities and for tailoring our websites to your preferred areas of interest. In this respect, the legitimate interest lies in the processing of data within the meaning of Article 6 (1) f) GDPR.   We use session cookies to make your use of our services more convenient for you. We use these to see if you have already visited individual pages on our website during the current session. This will allow your computer to be recognized when you return to our site. The session cookies are deleted immediately after leaving our website. The legal basis for using session cookies is defined in Article 6 (1) f) GDPR.  

- Google Analytics

To ensure requirements-oriented design and continuous optimization of our pages, we use Google Analytics, a web analysis service of Google Inc. (“Google”), based on Article 6 (1) f) GDPR. This allows us to understand how our website is being used. We have activated the IP anonymization function on this website.

This will result in your IP address being truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US where it is abbreviated. Google will use this information, on behalf of the operator of this website, to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. Under no circumstances will your IP address be merged with other Google data, insofar as this lies within our influence. The IP addresses are anonymized, so that association is not possible. 

You have the option to prevent the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of these data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4. User Conditions: http://www.google.com/analytic/terms/de.html, Privacy Summary: http://google.com/intl/de/analytics/learn/privacy.html, as well as the Privacy Policy: http://www.google.de/intl/de/policies/privacy.

- Use of YouTube

We use the YouTube.com platform to post our own videos and make them publicly available. The site operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. This mode, according to YouTube, means that YouTube does not store information about visitors to this site before they watch the video. However, sharing data with YouTube partners is not necessarily excluded by enhanced privacy mode. So YouTube will connect to the Google DoubleClick network regardless of whether you're watching a video.

Once you start a YouTube video on our website, it will connect to YouTube's servers. It tells the YouTube server which of our pages you've visited. If you are logged in to your YouTube account, YouTube will allow you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. In addition, after launching a video, YouTube may store various cookies on your device. With the help of these cookies, YouTube can receive information about visitors to our website. This information is used, amongst other things, to capture video statistics, improve usability, and prevent fraud. The cookies remain on your device until you delete them.

If necessary, after the launch of a YouTube video, other data processing operations may be triggered over which we have no control. The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

For more information about privacy on YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=en.

- Social media plug-ins 

We do not use social media plug-ins on this site.  

- Use of our contact form and contacting us by email 

To contact us with any questions or for advice, you can use the enquiry or contact form provided on our website or get in touch by email. The personal data transmitted to us in this way will of course be used exclusively for the purpose for which you provided them when contacting us.  

This information is provided on a voluntary basis and is initiated by you in these cases. Insofar as this information relates to details of communication channels (e.g. email address, telephone number), we will use these channels to contact you in accordance with your request. The purpose of processing your data is to process and respond to your request. The legal basis for processing the data that you submit to us in the course of contacting us is Article 6 (1) f) GDPR. 

We will erase your data that we receive during contact with you as soon as they are no longer needed to fulfil the purpose of the enquiry, in other words your enquiry has been fully processed and no further communication with you is required or desired.

5. Change of purpose 

We process your personal data exclusively for the purposes stated in this Privacy Policy. Any deviation from these purposes shall only occur if a legal provision allows us to do so or if you have consented to the changed purpose of data processing. 

6. Deletion of data

Unless expressly stated in this Privacy Policy, the data stored by us are deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention requirements. Insofar as the data are not deleted because they are required for other, legally permitted purposes, processing thereof will be restricted. The data are locked and not processed for other purposes. This applies, e.g. for data that must be kept for commercial or tax reasons. 

7. Your rights 

In addition to the right of revocation of your consent granted to us, the following further rights are available to you if the respective legal requirements are met: 

- Right to access

You have a right to access information about your personal data stored in our company pursuant to Art. 15 GDPR. In particular, you may obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been disclosed, the planned storage period and the source of your data, if not collected directly from you. 

- Right to rectification of incorrect data

Pursuant to Article 16 GDPR, you have the right to demand immediate rectification of incorrect personal data, or completion of incomplete data, stored by us. 

- Right to deletion

You have the right to delete your personal data stored by us pursuant to Article 17 GDPR, insofar as no statutory or contractual retention periods or other statutory obligations or rights for further storage are to be observed. 

- Right to restriction of processing

You have the right to restrict processing of your data pursuant to Article 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion; the data controller no longer needs the data, but you need them to assert, exercise or defend legal claims or you have objected to processing pursuant to Article 21 GDPR.  

- Right to data portability

You have the right to data portability pursuant to Article 20 GDPR, i.e. the right to transfer selected data stored by us in a common, machine-readable format, or to request transmission to another controller. 

- Right of objection

Pursuant to Article 21 (1) GDPR, you have the right, at any time, to object to the processing of your personal data for reasons arising from your particular situation. In this case, we shall cease processing your personal data immediately, unless we can show compelling reasons to continue said processing. These reasons must be based on your interests, rights and freedoms or arise from the need to assert, exercise or defend against legal claims. 

To exercise your rights, please contact the above-mentioned address by post or email datenschutz@bac-poolsystems.com

- Right to complain

For data protection complaints, you may contact the competent supervisory authority:  

The State Commissioner for Data Protection and Freedom of Information
Königstraße 10 a
70173 Stuttgart
Tel: 0711 615541-0
Fax: 0711 615541-15
Email: poststelle@lfdi.bwl.de

8. Data security  

We also take appropriate technical and organizational security measures to protect your stored personal data from manipulation, partial or complete loss and against unauthorized access by third parties. All personal data transmitted by you are transmitted using SSL, which is an industry standard and secure. Our security measures undergo continuous improvements in line with technological developments.    

9. Validity of the Privacy Policy  

This Privacy Policy is current and valid from June 2019.   

Due to the further development of our website and the offers displayed there or due to changes to legal or regulatory requirements, it may become necessary to change this Privacy Policy. You may view and print out the respective current Privacy Policy, at any time, from the website at bac-poolsystems.com/de/datenschutz/.