Privacy Policy

This privacy policy informs you about which personal data we collect, how we use it, and what rights you have in this regard. It applies to our website and all related functions and content.

Data Controller

Breconcherry GmbH
Sägewerkstr. 3
83395 Freilassing
Germany

Email: office@breconcherry.de
Managing Director: Dietmar Matzek
Imprint

What Data We Process

– Basic data (e.g. name, address)
– Contact data (e.g. email address, phone number)
– Content data (e.g. text entries, photos, videos)
– Usage data (e.g. pages visited, access times)
– Technical data (e.g. device information, IP address)

Who Is Affected

Visitors and users of our website (hereinafter referred to as “users”).

Purpose of Processing

– To provide our website and its functions
– To respond to contact inquiries
– For security measures
– For reach measurement and marketing

Key Terms Explained

Personal data is any information that can be used to identify a person – either directly (e.g. by name) or indirectly (e.g. via an ID number, location data, or a cookie).

Processing means any handling of such data, whether storing, retrieving, sharing, or deleting it.

Pseudonymization means altering data so that, without additional information, it can no longer be linked to a specific person.

Profiling is the automated evaluation of personal data to, for example, predict a person’s preferences, behavior, or interests.

Data controller is whoever decides on the purposes and means of data processing – in our case, Breconcherry GmbH.

Processor is a service provider who processes data on our behalf.

Legal Basis for Processing

We process data based on the following legal grounds:

– With your consent (Art. 6(1)(a) GDPR)
– To fulfill a contract or respond to your inquiry (Art. 6(1)(b) GDPR)
– To comply with legal obligations (Art. 6(1)(c) GDPR)
– Based on our legitimate interest, e.g. in a secure and functioning website (Art. 6(1)(f) GDPR)

Storing information on your device (e.g. cookies) or accessing information already stored there is additionally governed by Section 25(1) of the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG). Any consent given can be withdrawn at any time.

Security Measures

We implement technical and organizational measures to protect your data appropriately, in line with the state of the art and the relevant risk (Art. 32 GDPR). These include protection against unauthorized access, procedures for handling your rights, and considering data protection when selecting our systems (Art. 25 GDPR).

Working with Processors and Third Parties

We only share data if this is legally permitted, if you have consented, if there is a legal obligation to do so, or if it is necessary to protect our legitimate interests (e.g. when using service providers or our hosting provider). Where we engage third parties to process data, this is governed by a data processing agreement under Art. 28 GDPR.

Transfers to Third Countries

Should data be transferred to a country outside the EU or EEA, this only happens if an adequate level of data protection is ensured – for example through standard contractual clauses or, for the USA, certification under the EU-U.S. Data Privacy Framework.

Your Rights

You have the right to:

– Access information about what data we have stored about you (Art. 15 GDPR)
– Rectification of inaccurate data (Art. 16 GDPR)
– Erasure of your data (Art. 17 GDPR)
– Restriction of processing (Art. 18 GDPR)
– Data portability, i.e. receiving your data in a common format (Art. 20 GDPR)
– Lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

Right of Withdrawal

Any consent you have given can be withdrawn at any time with effect for the future (Art. 7(3) GDPR).

Right to Object

You can object to the processing of your data at any time, in particular if it is used for advertising purposes (Art. 21 GDPR).

Cookies and Consent Management

Cookies are small files stored on your device. They help, for example, to remember your language setting or to store your consent to certain services.

We only use cookies that are not technically necessary (e.g. for analytics or marketing) with your consent. You can withdraw this consent at any time.

Complianz

To obtain and legally document your consent to cookies, we use the cookie consent manager “Complianz” (provider: Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands). Complianz runs directly on our own server – no connection to Complianz’s servers is established, and no data is transmitted to Complianz. Only a cookie is stored in your browser so that we can match your given consent (or its withdrawal) to you. This data remains stored until you ask us to delete it, you delete the cookie yourself, or the purpose of storage no longer applies.

This processing takes place because we are legally required to document consent in a verifiable way (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR), as well as based on our legitimate interest in legally sound consent management (Art. 6(1)(f) GDPR).

Google Tag Manager

We use “Google Tag Manager” provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This lets us manage embedded services (e.g. Google Analytics) centrally, without having to directly edit our website’s code. Tag Manager itself does not collect any personal data and does not set its own cookies – it only ensures that other, already configured services are loaded.

All services that are not technically necessary are only loaded once you have given your consent via Complianz. The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG), and otherwise our legitimate interest in efficiently managing embedded services (Art. 6(1)(f) GDPR).

Data Deletion

We delete or restrict your data as soon as it is no longer needed for its purpose, unless a legal retention obligation applies (Art. 17, 18 GDPR). Such obligations exist, for example, for business records:

– In Germany: 10 years for accounting records and similar documents (Sections 147 AO, 257 HGB), 6 years for business correspondence
– In Austria: generally 7 years for bookkeeping records (Section 132 BAO), longer in certain cases

Contact

When you contact us (e.g. via contact form, email, or phone), we process your details to handle your inquiry (Art. 6(1)(b) or (f) GDPR). Your information may be stored in a CRM system or a comparable inquiry management system.

We delete inquiries once they are no longer needed and review this on a regular basis every two years. Statutory retention obligations remain unaffected.

Hosting and Email Delivery

To operate our website, we use hosting services such as storage space, databases, email delivery, and technical maintenance. In doing so, we, or our hosting provider, process the data of our website visitors to ensure a secure and reliable operation (Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR, data processing agreement).

Access Data and Log Files

Each time you access our website, our hosting provider automatically collects certain data (so-called server log files), such as the page requested, date and time, browser type, operating system, the previously visited page (referrer), and your IP address. This serves our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

This data is stored for a maximum of 7 days for security reasons and then deleted, unless it is still needed to investigate a specific incident.

Google Analytics

With your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG), we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service uses cookies to analyze how visitors use our website. The information generated may also be transmitted to Google servers in the USA – safeguarded by standard contractual clauses or certification under the EU-U.S. Data Privacy Framework.

We use Google Analytics with IP anonymization enabled: your IP address is shortened within the EU or EEA before being transferred to the USA in exceptional cases. Your shortened IP address is not merged with other Google data.

You can prevent the collection of your data by installing Google’s browser add-on (http://tools.google.com/dlpage/gaoptout?hl=en) or by withdrawing your consent at any time via our cookie consent manager, Complianz.

For more information, see Google’s privacy policy: https://policies.google.com/technologies/ads

Your data is deleted or anonymized after 14 months.

Google Ads and Conversion Tracking

With your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG), we use “Google Ads” provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display advertisements tailored to your interests (so-called remarketing).

This stores a cookie on your device that records which pages you visited and which content you were interested in. We also receive a conversion cookie, which Google uses to create anonymous statistics for us – for example, how many users visited a certain page after clicking an ad. We do not receive any information that would allow us to identify you personally.

Your data is processed pseudonymously, meaning Google does not store your name or email address, but instead assigns the data to a cookie. Any transfer to Google servers in the USA is based on standard contractual clauses or certification under the EU-U.S. Data Privacy Framework, where applicable.

For more information, see Google’s privacy policy: https://policies.google.com/technologies/ads

Embedded Third-Party Content

Our website embeds some content from third-party providers, such as videos or fonts. To display this content, the respective provider necessarily needs your IP address. We only use providers who use the IP address solely to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics) to, for example, statistically evaluate visitor traffic.

YouTube

We embed videos from the “YouTube” platform, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube videos are only loaded after you have given your consent via our cookie consent manager (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG).

Google Fonts

We embed fonts (“Google Fonts”) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display our website consistently.