The protection of your personal data is very important to us. Personal data within the meaning of this declaration is all data that relates to an identified or identifiable person. This privacy policy forms the basis on which we process personal data that we collect from you via the website www.bentheimer-eisenbahn.de or that you provide to us via this website.
Verantwortliche im Sinne der Datenschutzgrundverordnung (DSGVO) ist die Bentheimer Eisenbahn AG. Als Verantwortliche entscheidet sie über die Zwecke und Mittel der Verarbeitung Ihrer personenbezogenen Daten.
Contact details
Otto-Hahn-Straße 1,
48529 Nordhorn
Haben Sie Fragen zu der Verarbeitung Ihrer personenbezogenen Daten?
Do you have questions about the processing of your personal data? Contact our data protection officer by e-mail: datenschutz@bentheimer-eisenbahn.de or by phone at 05921/8033-0.
The nature and scope of how we collect and use your personal data depends on whether you merely use our websites for informational purposes or utilize offers provided by us.
2.1. Informational use of our website
For the purely informational use of our websites, it is generally not necessary for you to provide personal data. Rather, in this case, we only collect and use those data of yours that your internet browser automatically transmits to us.
These data include:
We do not use the aforementioned data to draw conclusions about your user behavior or for other personal evaluations. On the basis of Art. 6 para. 1 lit. f GDPR, we use the aforementioned data solely for the purpose of enabling you to access our websites and their content, as well as for statistical purposes and to improve our website offering.
2.1. E-mail inquiries
Furthermore, you have the option of contacting us via the e-mail addresses published on our websites. In this case, the personal data you transmit to us in the e-mail will be stored. We use the personal data you provide us with in e-mail inquiries solely for the purpose of processing your inquiries. The legal basis for processing the aforementioned personal data is Art. 6 para. 1 lit. f GDPR, as processing inquiries and the accompanying maintenance of our relationship with you lies in our legitimate interest. If your contact aims at concluding a contract with us, Art. 6 para. 1 lit. b GDPR is additionally the legal basis for processing your personal data.
2.2. Newsletter, right to object
We use your e-mail address and your name to provide you with information about products and services via our newsletter. There are 2 options for providing our newsletter: a) You have the opportunity to subscribe to our newsletter by entering your e-mail address and your name in a registration form on our websites. By subscribing to our newsletter, you receive current information about the company and projects. By subscribing to our newsletter, you grant us consent to process and use the aforementioned contact data for the purpose of sending e-mails to you (Art. 6 para. 1 lit. b GDPR). For sending newsletters, we use the so-called double opt-in procedure, i.e., we will only send you the newsletter if you previously confirm your registration via a confirmation e-mail sent to you for this purpose by clicking the link contained therein. This is to ensure that only you yourself, as the holder of the specified e-mail address, can register for the newsletter. You can object to receiving the newsletter subscribed to with us at any time and unsubscribe accordingly. To do this, you can either send us an informal e-mail to the e-mail address listed in Section 1 or cancel via the link at the end of each newsletter. b) If we have received your e-mail address in connection with the sale of a good or service from you, we can use it to send you information about goods and services by newsletter that are similar to those you have already purchased or used from us. This form of direct marketing within the framework of existing customer relationships is in our legitimate interest (Art. 6 para. 1 lit. f GDPR). You have the right to object to receiving this newsletter at the time of collection and at any time thereafter without incurring any costs other than the transmission costs according to the basic rates. To exercise your right to object, use the link at the end of each newsletter or contact us via the e-mail address listed in Section 1. We inform you before submitting each order about the use of your personal data for the aforementioned purpose and about your right to object existing in this regard.
So-called “cookies” are used on our website.
3.1. What are cookies?
Cookies are small text files that are sent by our web server to your browser during your visit to our websites and are kept by it on your device for later retrieval. When our websites are accessed again, the information stored on your device is sent back to us. This information exchange serves to make our website offering user-friendly and effective for you.
3.2 What type of cookies do we use?
Our websites use so-called session cookies. These cookies only store and retrieve information that is necessary so that we can technically provide you with the functions of our websites. For example, we use session cookies to store information about the contents of your shopping cart so that it can be displayed across multiple pages (e.g., during the processing of the ordering process). The session cookies we use are deleted after the end of each browser session. The use of session cookies to ensure the functionality of our websites is in our legitimate interest (Art. 6 para. 1 lit. f GDPR).
3.3. How can you prevent the use of cookies?
You can determine yourself through the settings in your browser whether cookies can be set and retrieved. You can, for example, completely deactivate the saving of cookies in your browser, restrict it to certain websites, or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback on this. You can block or delete individual cookies. For technical reasons, however, this can lead to some functions of our websites being impaired and no longer working fully.
Our websites use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics helps us determine which areas of our websites are well or poorly received by users, allowing us to review and optimize the effectiveness of our website design. The use of Google Analytics is therefore based on Art. 6 para. 1 lit. f GDPR in the legitimate interest of Bentheimer Eisenbahn AG or on the basis of your prior consent (Art. 6 para. 1 lit. a GDPR).
4.1. How does Google Analytics work?
Google Analytics also uses cookies, i.e., text files that are stored on your computer and that enable an analysis of your use of our websites. The information generated by the cookie about your use of our websites is generally transmitted to a Google server in the USA and stored there. IP anonymization has been activated on our websites, so that your IP address is previously shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the websites, to compile reports on website activities, and to provide us as website operators with further services associated with website use and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
4.2. How can you prevent the use of Google Analytics?
You can prevent the storage of cookies by configuring your browser software accordingly; however, we point out that in this case you may not be able to fully use all functions of our websites. Furthermore, you can prevent the collection by Google of the data generated by the cookie and relating to your use of the websites (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, you can disable the collection of your usage data by Google Analytics by clicking here. In this case, a special opt-out cookie is set that prevents the future collection of your usage data when visiting our websites by Google Analytics. Google’s privacy policy can be found at:
https://www.google.com/policies/privacy/partners/?hl=de
Our websites use social plugins from the providers “Facebook”, “Twitter”, “Google +”, and “Pinterest”. The social plugins are marked with the various logos of the providers. When you visit our websites, data is not automatically transmitted to the aforementioned providers via the plugins. Only when you activate the plugins by means of a click do you grant your consent that a connection to the providers’ servers is established and data is transmitted to them (Art. 6 para. 1 lit. a GDPR). We have no influence on the nature and scope of the data collected and stored by the respective providers with the help of the plugins. Information on this can be found in the privacy policies of the respective providers:
6.1. Integration of external service providers
For the fulfillment of our contracts with you, for the provision of our website, or to achieve other processing purposes mentioned in this privacy policy, we may work with external service providers. The disclosure of your personal data to these external service providers only takes place to the extent necessary to perform the aforementioned tasks. We naturally select the external service providers who support us in carrying out the aforementioned tasks with care and require them to use your personal data in accordance with this privacy policy and existing data processing agreements. The external service providers generally process the transmitted personal data only in accordance with our instructions.
The categories of external service providers who receive your data include:
6.2 Data transmission to third parties
Otherwise, we only transmit the personal data that we collect and process in accordance with sections 2 to 5 – unless expressly stated otherwise in this privacy policy – to third parties if you have given us your prior consent to do so. In addition, we transmit your data to third parties to the extent that we are obliged to do so on the basis of statutory provisions or judicial or official orders.
We store your personal data within Germany. We retain your personal data only for as long as is necessary to achieve the aforementioned processing purposes. If the respective processing purpose ceases to apply, the personal data will be deleted or blocked in accordance with statutory requirements. If the retention of your personal data is necessary due to a legal provision to which the controller is subject, your personal data will be blocked or deleted when the storage period prescribed by the legal provision expires.
We employ technical and organizational security measures to protect the personal data collected by us and communicated by you, in particular against accidental or intentional manipulation, loss, destruction, or against attack by unauthorized persons.
However, we point out that data transmission on the internet (e.g., in communication by e-mail) is unfortunately not completely secure. We will do our best to protect your personal data, but we cannot guarantee the complete security of your data.
You have the right to information about your personal data (Art. 15 GDPR, § 34 BDSG). You can also request rectification (Art. 16 GDPR), deletion (Art. 17 GDPR, § 35 BDSG), and transfer (Art. 20 GDPR) of your personal data.
You are entitled to object to the processing of your personal data (Art. 21 GDPR) or to request the restriction of processing (Art. 18 GDPR, § 35 BDSG).
If you have given us consent to process your personal data, you can revoke this at any time with effect for the future. To assert the aforementioned rights, please contact the controller using the contact details listed in Section 1.
General right to object (Art. 21 para. 1 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e (public interest) or Art. 6 para. 1 lit. f (legitimate interest); this also applies to profiling based on these provisions:
Right to object to direct marketing (Art. 21 para. 2 GDPR) You can object to the processing of your personal data for the purpose of direct marketing at any time – without giving reasons. This also applies to profiling insofar as it is related to such direct advertising. Recipient of the objection: Please direct your objection to the controller using the contact details listed in Section 1.
