The protection of your data is very important to us, which is why we observe the applicable provisions on data protection, in particular those set forth in the GDPR and the national data protection law, while processing your personal data. Below you will find more detailed information on the data processing activities carried out by us:

1. Controller

BG-Graspointner GmbH*
Reinoldstraße 6b
50676 Köln
+49.221.80 14 24-70

Since we are not legally required to do so, we have not appointed/designated to the supervisory authority a data protection officer. If you have any questions, you can contact us at the above (email) address. The controller is member of a group of undertakings within the meaning of Art. 4 (19) GDPR. The data listed below are only transferred to other members of the group of undertakings where this is expressly mentioned. The legal basis is our legitimate interest in transferring the data for internal administrative purposes (point (f) of Art. 6 (1) in conjunction with Recital 48 GDPR).

2. Rights of the data subject/Right to object and withdraw consent/Right to lodge a complaint

2.1. You can exercise the following rights against us in respect of the personal data concerning you:
  • Right of access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR) or erasure (Art 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to object to processing (Art. 21 GDPR).

Right to object: Where the processing of your personal data is based on the balancing of interests (point (f) of Art. 6 (1) GDPR: legitimate interests), you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. When you exercise your right to object, we will ask you to state the reasons why you do not wish your personal data to be processed the way we previously did. We will review the circumstances and will either discontinue the processing, modify the processing or demonstrate to you our compelling legitimate grounds for continuing the processing. We will also continue the processing to the extent necessary for the establishment, exercise or defence of legal claims.

You have the right to object at any time to processing of personal data for direct marketing and data analysis purposes. In this case, we will discontinue the data processing.

Right to withdraw consent: Where you have consented to the processing of your personal data, you can withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing carried out before the withdrawal.

To exercise the above rights, you have to contact us personally, by phone or in writing:

BG-Graspointner GmbH*
Reinoldstraße 6b
50676 Köln
+49.221.80 14 24-70

Please note that we are only able to provide information if you provide proof of your identity. This is mainly to protect you and prevent the disclosure of your data to unauthorised third parties.

2.2. If you consider that the data processing infringes the applicable data protection regulations or that we violate your rights under the data protection regulations, you also have the right to lodge a complaint with the supervisory authority in the member state of your habitual residence, place of work or place of the alleged infringement.
If you wish to lodge a complaint with the supervisory authority in Austria, please address your complaint to:

The Federal Commissioner for Data Protection and Freedom of Information
Husarenstraße 30
53117 Bonn

3. Information on the processing of your personal data

3.1. When visiting the website merely for information purposes
3.2. Electronic contact requests via the website
3.3. Cookies/Web analytics service
3.4. Customer management, accounting, logistics and bookkeeping
The provision of your personal data is required for the performance of the contract and/or to take steps prior to entering into the contract. Without these data, we cannot conclude a contract with you.

3.5. Customer support and marketing for own purposes
3.6. Applicant management

4. Information on data transfer to third countries or international organisations

The data processed by us will only be transferred to the following members of our group of undertakings (Art. 4 (19) GDPR):
In the case of Canada, this transfer takes place on the basis of an adequacy decision (Art. 45 (3) GDPR) and in other cases on the basis of standard data protection clauses (point (c) of Art. 46 (2) GDPR) adopted by the European Commission in accordance with the examination procedure referred to in Art. 93 (2) GDPR.

* valid from 1st of September 2019