The safety of your personal data is important to us. The principles for the processing of personal data under the Data Protection Regulation (DSGVO) – transparency, legality, earmarking, data integrity and data minimization – are also standards for the handling of your data. We attach great importance to justifying the trust you have placed in us in this regard as well. We therefore protect your personal data in particular against access by unauthorized persons.
Bönning + Sommer GmbH & Co. KG
Telefon: +49 (0)5642 9805
Represented by the Supervisory Board, which in turn is represented by the Chairman of the Supervisory Board, Mr Thomas Pfänder
Register-Nr. HRB 13288 Amtsgericht Paderborn
UST.-ID: DE 316 796 458
I. General information:
1. Personal data
Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, e-mail address or postal address. However, information that can not be linked to your identity (such as statistical information, such as the number of online users) is not considered personally identifiable information.
An automated decision-making based on your personal data does not take place in connection with the use of our online offer.
2. Collection, processing and use of personal data when visiting our homepage
Based on our legitimate interest (see Article 6 (1) lit. DSGVO), we collect data on access to this website and save it as “server log files” on the server of the website. The following data is logged:
File, date and time at the time of access
Amount of transmitted data in bytes
Notification of successful retrieval
The Browser used (Type and Version)
Source / reference from which you came to the site (the previously visited website)
The server log files are deleted regularly and automatically. The data is stored for statistical analysis for the purpose of operation, optimization and for security reasons, for example. Abuse cases or functional errors can be clarified. If data must be revoked for reasons of proof, they are excluded from the deletion until the incident has been definitively clarified. There is no merge of this data with other data sources.
Your personal data is transmitted encrypted over the Internet. We use SSL encryption (Secure Socket Layer) for data transmission.
3. Legal bases of data processing
We obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR as the legal basis for data processing.
Insofar as your personal data are processed because this is necessary to fulfill a contract or in the context of a contract-like relationship with you, Art. 6 para. 1 lit. b) GDPR as the legal basis for data processing.
Insofar as we process your personal data in order to fulfill a legal obligation, Art. 6 para. 1 lit. c) GDPR as legal basis for data processing.
As a legal basis for data processing, Art. 6 para. 1 lit. f) GDPR if the processing of your personal data is necessary for the protection of the legitimate interests of our company or a third party and your interests, fundamental rights and fundamental freedoms do not require the protection of your personal data.
Cookies are smaller text files that are stored by your browser on your device. Until the end of your browser, the cookies remain stored and can also automatically deposit certain information when closing our homepage in case of a renewed call of our homepage.
a) Our website uses the following types of cookies, the scope and operation of which are explained below:
Temporary Cookies (explained in b)
Permanent Cookies (explained in c)
b) Temporary cookies are automatically deleted when you close the browser. These include, in particular, the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Permanent cookies remain on your device and allow us to recognize your browser on your next visit. This will allow us to take your preferences and settings into account when you next visit our website. They have a longer storage period than temporary cookies. The duration of storage can be found in the cookie settings of your web browser.
d) You can configure your browser setting according to your wishes and, for example, be informed about the setting of cookies and individually decide on the acceptance and reject the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all features of this site. Each browser differs in the way it manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings.
5. Affected Rights
We attach great importance to explaining the processing of your personal data as transparently as possible and to inform you about your rights. If you want more information or want to discuss your rights, you can contact us at any time to take care of your concerns.
You have extensive rights to the processing of your personal data. First of all, you have a comprehensive right to information and may, if necessary, request the correction and / or deletion or blocking of your personal data. You can also request a restriction of processing and have a right to object. You also have a right to data transferring with regard to the personal data you provide to us.
If you wish to claim any of your rights and / or receive more information about them, please contact our Data Protection Officer directly:
Bönning + Sommer GmbH & Co. KG
Fon: +49 (0)5642 98050
Fax: +49 (0) 5642 980530
Once consent has been given, it can be freely revoked at any time with effect for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. The contact person for this is also our data protection officer:
Bönning + Sommer GmbH & Co. KG
Fon: +49 (0)5642 98050
Fax: +49 (0) 5642 980530
If the processing of your personal data is not based on consent, but on the basis of another legal basis, you can object to this data processing. Your opposition leads to a review and, if necessary, termination of data processing. You will be informed about the result of the review and – as far as the data processing is still to be continued – we will provide you with further information as to why data processing is permitted.
We point out here that we continue to store personal data even after the conclusion of a business relationship. We can only delete the personal data if no statutory retention periods preclude this. Only after the expiry of the retention periods, we can possibly comply with a cancellation request. If you wish the deletion of the data during the retention period, we will block the personal data until the expiry of the retention period for the use and therefore stop using it.
6. Protection of minors
Children and adolescents under the age of 18 should not submit any personal information to us without the consent of their parent or legal guardian.
You can contact us in various ways, including through the contact form on our website.
If you would like to use the contact form in our online page, we collect the personal data that you specify in the contact form, in particular
We process the data transmitted via the contact form exclusively for the purpose of being able to answer your requests or your feedbacks and any follow-up questions.
You can decide for yourself which information you submit to us via the contact form. The legal basis for processing your data is your consent in accordance with Art. 6 para. 1 sec. a) GDPR or Art. 6 para. 1 sec. b) GDPR, as the processing of your data is necessary for the fulfillment of a contract or for the execution of pre-contractual measures between us, which takes place at your request through our contact form.
After the matter has been processed by us, the data will first be stored in case of any queries. A deletion of the data can be demanded at any time, otherwise the deletion takes place after finalization of the matter; statutory storage obligations remain unaffected.
II. Integration of third-parties
1. Integration of YouTube-Videos
We have included YouTube videos in our online website, which are stored on http://www.YouTube.com and are directly playable from our website. These are all embedded in “extended data protection mode”, which means that if you do not play the video, you will not transfer any data about you as a user to YouTube. Only when you play the videos, the data mentioned in the following paragraph will be transmitted. We have no influence on this data transfer.
Your visit to the website gives YouTube the information that you have accessed the corresponding sub-page of our website. The data specified in Section 2 of this statement are also transferred. This happens irrespective of whether YouTube provides a user account by way of which you are logged in or whether there is no user account. If you are logged in at Google, your data are assigned directly to your account. If you do not wish to have the assignment of your profile at YouTube, you have to log out before you activate the button. YouTube stores your data as user profiles and uses them for the purpose of advertising, market research and/or the needs-orientated design of its website. Analysis of this kind is done in particular (also in the case of users who are not logged in) for the presentation of needs-directed advertising and in order to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, though to exercise that right you have to contact YouTube.
Further information on the purpose and scope of the collection of data and its processing by the plug-in provider can be found in YouTube’s data protection statement. There you will also find further information on the rights and settings you have for the protection of your privacy. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
We use Youtube, in order to be able to present our offers visually appealing and comprehensible. Legal basis Art. 6 Abs. 1 lit f) DSGVO.
2. Integration of Social Networks
In our Online webpage you can find the links to the following social networks
in the form of so-called “social plug-ins”. The links are indicated by the respective logo of the provider.
We use the so-called two-click solution. In other words, when you visit our site, initially no personal data is passed on to the providers of the plug-ins. The provider of the plug-in can be recognized by the marking on the box above the first letter or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the highlighted field and activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online service. In addition, the data mentioned at the beginning of this declaration will be transmitted. In the case of, for example, Facebook, the IP address is anonymized immediately after collection, according to the respective provider in Germany. By activating the plug-in, personal data will be transmitted by you to the respective plug-in provider and stored there (with US providers in the USA). Since the plug-in provider carries out the data collection, in particular via cookies, we recommend that you delete all cookies before clicking on the greyed box via the security settings of your browser.
We have no influence on the collected data and data processing operations, nor are we aware of the full extent of the data collection, the purpose of the processing, the storage periods. We also have no information to delete the data collected by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, whereby you must contact the respective plug-in provider to exercise this. Through the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f) DS-GMO.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and for example, if you link the page, the plug-in provider also stores this information in your user account and shares it with your contacts publicly. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will prevent you from being assigned to your profile with the plug-in provider.
For more information on the purpose and scope of the data collection and how it is processed by the plug-in provider, please refer to the privacy statements of these providers provided below. There you will also find further information about your rights and settings for the protection of your privacy.
An activated social plug-in remains active until you disable it or delete your cookies.
Further information on the purpose and extent of the data collection and its processing by the respective provider can be found in the corresponding data protection declaration. There you will also get further information about your rights and settings options for the protection of your privacy:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information about the data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications sowie http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook has submitted to the EU-US Privacy Shield on https://www.privacyshield.gov/EU-US-Frameworkhttps://twitter.com/de/privacy
Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103; https://twitter.com/de/privacy
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy.
LinkedIn has submitted to the EU-US Privacy Shield on https://www.privacyshield.gov/EU-US-Framework.
YouTube is a Google LLC service („Google“), Amphitheatre Parkway, Mountain View, CA 94043, USA, further information about the data collection: Privatsphäre: https://policies.google.com/privacy?hl=de&gl=de.
Google has submitted to the EU-US Privacy Shield on https://www.privacyshield.gov/EU-US-Framework.
GitHUb, San Francisco, USA; https://help.github.com/articles/github-privacy-statement/
III. Evaluation of usage data; Use of analysis tools
We want to tailor the content of our website as precisely as possible to your interests and thus improve our offer for you. The following analysis tools are used for this:
Google (Universal) Analytics,
1. Google Analytics
We use Google Analytics for statistical analysis. Google Analytics is a web analytics service provided by Google LLC (“Google”), Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, which allow an analysis of the use of the website by you. The information generated by the cookies is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is enabled on this website, Google will truncate your IP address beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available at the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de.
You can find further information on http://tools.google.com/dlpage/gaoptout?hl=de http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and privacy).
We use technologies from Hojar Limited, Level 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (www.hotjar.com) to analyze the use of our website. For this purpose, data is automatically collected and stored, from which pseudonymous usage profiles are created. The Hotjar tool we use records mouse movements on our website in so-called heatmaps. This allows us to anonymously recognize where visitors click and how far they scroll. This allows us to make our website better and more customer-friendly. Protecting your personal information is very important to us when using this tool. All data is collected without us being able to assign it to specific users. We can only understand how the mouse moves, where it was clicked, and how far scrolled. Further, the screen size of the device, the device type, information about the browser, the country from which it was accessed and the preferred language are recorded. Cookies are used for this purpose. The pseudonymised user profiles will not be merged with personal data about the bearer of the pseudonym without explicit consent. After purpose and end of the use of Hotjar by us, the data collected in this context will be deleted.
You may opt-out of data collection and storage at any time by following this link: https://www.hotjar.com/opt-out.
IV. Retargeting and Remarketing
Retargeting and Remarketing are technologies in which, after you have left a certain website, even after you have left this website, appropriate advertising is displayed. For this it is necessary that you are recognized beyond the left website. For this purpose, cookies of the corresponding service providers are used. Your previous usage behavior will also be considered. For example, if you look at certain products, you may later see these or similar products appear as advertisements on other websites. It is therefore personalized advertising that is specially adapted to your needs. It is not necessary to identify beyond recognition. Therefore, the data used for the retargeting or remarketing will not be merged with other data.
As part of retargeting and remarketing, data is passed on to third parties for advertising or marketing purposes. We work with the following companies for this purpose:
Google Tag Manager,
Google Double Click,
Google AdWords Remarketing and Google Analytics Audiences,
LinkedIn Insight & Conversion Tag,
Twitter Ads & Conversion,
In accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR of preserving our legitimate interests in optimally marketing our website and placing advertisements.
1. Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution operated by Google LLC. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) that allows marketed website tags to be managed using an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not register personal data. The tool causes other tags to be activated which may, for their part, register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager.
You can find further information on : https://www.google.com/intl/de/tagmanager/use-policy.html
2. Double Click by Google
We also use the “DoubleClick cookie” when using Google Analytics. This allows you to recognize your browser when visiting another website. The information generated by the cookie is usually transmitted to a Google server in the US and stored there. However, if IP anonymization is enabled on this website, Google will truncate your IP address beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The anonymized IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. After purpose and end of the use of Google services by us, the data collected in this context will be deleted.
Google Double Click is an offer from Google LLC („Google“), Amphitheatre Parkway, Mountain View, CA 94043, USA. You can disable the DoubleClick cookie through the following link through a plug-in: https://www.google.com/settings/ads/plugin.
3. Google AdSense
We use Google AdSense to market space on our third-party and ad network sites. These ads will appear in different places on our website. As part of Google AdSense integration, all users of our website will be provided with the “DoubleClick cookie” (see above), which will allow you to recognize your browser when visiting another website and thus display personalized advertising using a pseudonymous user ID. After purpose and end of the use of Google services by us, the data collected in this context will be deleted.
Google AdSense is an offer from Google LLC („Google“), Amphitheatre Parkway, Mountain View, CA 94043, USA.
4. Google AdWords Remarketing und Google Analytics Audiences
We use Google Adwords Remarketing and Google Analytics Audiences to promote this site on Google’s search results and on third-party websites. For this purpose, when you visit our website, the “remarketing cookie” from Google will be stored in your browser or the “Google Analytics cookie” used additionally. These cookies automatically enable interest-based advertising through a pseudonymous CookieID; based on the websites you have previously visited. After expiration and end of the use of Google AdWords Remarketing and Google Analytics by us, the data collected in this context will be deleted.
No further processing will take place unless you have consented to Google’s permission to associate your Google web and app browsing history with your Google Account and to use information from your Google Account to personalize ads. In this case, if you are logged into Google while visiting our website, Google uses your data with Google Analytics data to create and define audience lists for cross-device remarketing.
Google AdWords Remarketing und Google Analytics are offers from Google LLC („Google“), Amphitheatre Parkway, Mountain View, CA 94043, USA.
The installation of cookies for Google Remarketing can be prevented by a setting of the respective browser software by calling the website http://www.google.com/policies/privacy/ads/ and changing the corresponding setting.
5. AdRoll Retargeting
We use AdRoll Retargeting to promote our website in search results and third party websites. For this purpose, when you visit our website, an “AdRoll cookie”, which uses a pseudonymous CookieID and based on the pages you visit to enable interest-based advertising, is automatically stored in your browser. After expediency and the end of the use of AdRoll Retargeting by us, the data collected in this context will be deleted.
AdRoll Retargeting is an offer from AdRoll Advertising Limited, Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland.
You can disable the “AdRoll cookie” by following the link: https://app.adroll.com/optout/.
6. LinkedIn Insight & Conversion Tag
We advertise on the LinkedIn Corporation Web site, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA (www.linkedin.com) for our website. When you visit our website, a cookie is automatically placed in your current browser: this allows you to display interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. After the convenience and end of the use of the LinkedIn Insight & Conversion Tag by us, the data collected in this context will be deleted.
Use the following link to disable the remarketing cookie (LinkedIn Insight & Conversion Tag):
7. Twitter Ads & Conversion
We advertise our website at Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 (www.twitter.com). When you visit our website, a cookie is automatically placed in your current browser: this allows you to use a pseudonymous cookie ID and based on the pages you visit to display interest-based advertising by tracking your actions taken after the event View ads or interact with ads on Twitter.
You can disable the Twitter Ads & Conversions cookie via the following link: https://help.twitter.com/safety-and-security/privacy-controls-for-tailored-ads.
8. Facebook Pixel
We use Facebook Pixel, our partner Facebook, 1 Hacker Way, 94025 Menlo Park, California, USA (www.facebook.com) on our website to the following extent:
Facebook Connect, for an analysis of access data,,
Facebook Custom Audience, for an analysis of access data,,
Facebook Events, for an analysis of access data,,
Facebook Pixel Remarketing, for an analysis of the access data of product pages,
Facebook Pixel Tracking, for an analysis of access data,,
Facebook Pixel Conversions, for an analysis of the conversion data at the time the order is placed (order value, currency, information, whether existing or new customer).
Through the Facebook Pixel, when visiting our website, a cookie is automatically stored in your currently used browser, which automatically enables the mentioned functions by means of a pseudonymous CookieID and based on the pages you have visited. This will allow us to understand how our marketing activities can be taken up and improved on Facebook. After expediency and the end of the use of Facebook services by us, the data collected in this context will be deleted.
The contradiction and a complete deactivation of the Facebook pixel is possible via the following link: By clicking on the opt-out link, an opt-out cookie with unlimited validity is stored in the current browser of the user. This will prevent any traffic through the Facebook Pixel.
V. Contact for Privacy
Bönning + Sommer GmbH & Co. KG
Fon: +49 (0)5642 98050
Fax: +49 (0) 5642 980530
VI. Right of appeal
You have the right to report alleged violations of privacy legislation and to complain to the relevant regulatory body. The complaint can be sent to:
Country Commissioner for Data Protection and Freedom of Information
Postfach 20 04 44
You can also, especially if you are not a citizen of Germany, contact the competent authority of your member state or contact:
The Federal Commissioner for Data Protection and Freedom of Information
Telefon: +49 (0)228 997799-0
Fax: +49 (0)228 997799-5550