BRANOholding Logo

 

1.1 General Information

 
We, BRANOfilter GmbH, want you to feel comfortable and secure when using our website. Therefore, we take the confidentiality and integrity of your personal data very seriously. We process your data according to the principles of the European General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG new version).
 
 

1.1 Responsible Party

The responsible party for data processing on this website is: BRANO Holding GmbH & Co. KG, Industriestr. 23, 90599 Dietenhofen, Germany, Phone: +49 (0) 9824 955-0, Email: info@branoholding.de
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Data Protection Officer: BRANO Holding GmbH & Co. KG, Industriestr. 23, 90599 Dietenhofen, Germany, Phone: +49 (0) 9824 955-0, Email: datenschutz@branofilter.de
 
 

1.2 How do we collect your data?

Your data is collected in part when you provide it to us. For example, this can involve data you enter into a contact form.
Other data is automatically or collected with your consent when you visit the website through our IT systems. These are mainly technical data (e.g., internet browser, operating system, or time of page view). The collection of this data occurs automatically as soon as you access this website.
 
 

1.3 What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. For these purposes, and for any other questions regarding data protection, you can contact us at any time.
 
 

1.4 Analysis Tools and Third-Party Tools

When visiting this website, your surfing behavior may be statistically evaluated. This is primarily done using so-called analysis programs. Detailed information about these analysis programs can be found in section 6 of this privacy policy.
 
 

2. Hosting

 
This website is hosted externally. The personal data collected on this website is stored on the servers of the host/provider. This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website. External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of providing our online services in a secure, fast, and efficient manner through a professional provider (Art. 6 Para. 1 lit. f GDPR). If explicit consent has been obtained, the processing is solely based on Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG, if the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TTDSG. The consent can be revoked at any time. Our host(s) will process your data only to the extent necessary to fulfill their service obligations and follow our instructions regarding these data.
 
We use the following host:
fourplex GmbH, Allersberger Straße 185, Building C1, 90461 Nürnberg, Germany
 
Data Processing Agreement
We have entered into a data processing agreement (DPA) in accordance with Art. 28 GDPR with the aforementioned provider. This is a legally required contract that ensures the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
 

 

3. General Information on the Legal Basis for Data Processing on This Website


If you have given your consent to data processing, we process your personal data based on Article 6(1)(a) GDPR or, if special categories of data under Article 9(1) GDPR are processed, based on Article 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) TTDSG. Consent can be revoked at any time. If your data is necessary for contract fulfillment or for pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if it is required to fulfill a legal obligation based on Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The specific legal basis applicable in each case is provided in the following sections of this privacy policy.
 
 

3.1 Notice on Data Transfer to the USA and Other Third Countries

We use tools from companies based in the USA or other countries that are not considered safe under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. Please note that these countries may not provide a level of data protection comparable to that of the EU. For example, US companies are required to disclose personal data to security authorities, and you may not have legal recourse against this. It cannot be ruled out that US authorities (e.g., intelligence services) may process, analyze, and permanently store your data on US servers for surveillance purposes. We have no control over these processing activities.
 
 

3.2 Revocation of Your Consent to Data Processing

Many data processing activities are only possible with your explicit consent. You can revoke consent at any time. The legality of data processing carried out before revocation remains unaffected.
 
 

3.3 Right to Object to Data Collection in Special Cases and to Direct Marketing (Article 21 GDPR)

If data processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The applicable legal basis for processing is stated in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing is necessary for establishing, exercising, or defending legal claims (objection under Article 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) GDPR).
 
 

3.4 SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
 
 

4. Data Collection on This Website


 

4.1 Cookies

Our website uses “cookies.” Cookies are small data packets that do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them or your browser automatically removes them.

Third-party cookies may also be stored on your device when you visit our website. These enable us or you to use certain third-party services (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary since certain website functions would not work without them (e.g., shopping cart functionality or video display). Other cookies analyze user behavior or display advertisements.

Cookies required for electronic communication, the provision of certain functions requested by you (e.g., shopping cart function), or website optimization (e.g., audience measurement cookies) are stored based on Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent for cookie storage or similar recognition technologies has been requested, processing is based solely on this consent (Article 6(1)(a) GDPR and Section 25(1) TTDSG); consent can be revoked at any time.

You can set your browser to inform you about cookie placement, allow cookies only in individual cases, exclude cookies for specific cases or in general, and enable automatic cookie deletion when closing the browser. Disabling cookies may limit this website’s functionality.

If third-party cookies or cookies used for analytical purposes are used, we will inform you separately in this privacy policy and request consent if necessary.
 
 

4.2 Consent with Borlabs

This website uses Borlabs’ consent technology to obtain your permission for storing specific cookies or using certain technologies in a legally compliant manner. The provider of this technology is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany (“Borlabs”).

When you visit our website, the following personal data is transmitted to Borlabs:

Borlabs also stores a cookie in your browser to assign the granted consents or their revocation. The collected data is stored until you request deletion, delete the Borlabs cookie yourself, or the data storage purpose is no longer applicable. Legal retention obligations remain unaffected. Borlabs is used to obtain the legally required consents for using specific technologies. The legal basis for this is Article 6(1)(c) GDPR.
 
 

4.3 Contact Form

If you submit inquiries via the contact form, we store the information you provide, including your contact details, to process your inquiry and handle follow-up questions. We do not share this data without your consent.

Data processing is based on Article 6(1)(b) GDPR if your request is related to a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), which can be revoked at any time.

Your data from the contact form remains with us until you request deletion, revoke your consent for storage, or the purpose for storing data no longer applies (e.g., after your inquiry is processed). Mandatory legal provisions, especially retention periods, remain unaffected.
 
 

4.4 Inquiry by Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry, including all related personal data (name, request), is stored and processed to handle your request. We do not share this data without your consent.

Data processing is based on Article 6(1)(b) GDPR if your request is contract-related or concerns pre-contractual measures. Otherwise, processing is based on our legitimate interest in effectively handling inquiries (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR), which can be revoked at any time.

Your contact request data remains with us until you request deletion, revoke consent, or the purpose of storage no longer applies (e.g., after your issue is resolved). Mandatory legal provisions, particularly retention periods, remain unaffected.
 
 

5. Analysis Tools and Advertising


 

5.1 Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies, or perform any independent analysis. It is solely used for managing and deploying the tools integrated through it. However, the Google Tag Manager does capture your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of the Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on their website. If consent has been requested, the processing will occur exclusively based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in accordance with TTDSG. The consent can be revoked at any time.
 
 

5.2 IP Anonymization

We have activated the IP anonymization feature on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide additional services related to website use and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
 
 

5.3 Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
 
 

5.4 Order Processing

We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
 
 

6. Plugins and Tools


 

6.1 Google Fonts (Local Hosting)

This website uses Google Fonts to ensure a consistent display of fonts, which are provided by Google. The Google Fonts are installed locally. No connection to Google’s servers occurs in this case.
For more information on Google Fonts, you can visit https://developers.google.com/fonts/faq and read Google’s privacy policy here: https://policies.google.com/privacy?hl=en.
 
 

6.2 Polylang

On this website, we use the Polylang plugin to provide multilingual content. Polylang allows the website to be displayed in different languages and helps us improve the user experience. When using the plugin, no personal data is stored or processed beyond the functionality required for multilingualism. However, Polylang may store certain technical data such as language settings and URL parameters to ensure the correct display of the website in the respective language. This data is used solely to enhance the user experience and is not shared with third parties.
 
 

6.3 Retention Period

Unless a more specific retention period is mentioned within this privacy policy, your personal data will remain with us until the purpose of processing the data no longer applies. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods). In the latter case, the deletion will occur once those reasons no longer apply.
 
 

7. Rights of Data Subjects


 

7.1 Right to Complain to the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the location of the alleged infringement. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
 
 

7.2 Right to Data Portability

You have the right to receive the data we process automatically based on your consent or in the performance of a contract in a commonly used, machine-readable format and to transmit this data to yourself or to a third party. If you request the direct transmission of the data to another controller, this will only be done insofar as it is technically feasible.
 
 

7.3 Right to Information, Deletion, and Correction

You have the right, at any time, to request free information about the personal data we have stored about you, its origin, recipients, the purpose of processing, and, if applicable, the right to correction or deletion of this data. You can contact us at any time regarding this and any other questions related to your personal data.
 
 

7.4 Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time regarding this. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we typically need time to verify this. During the verification process, you have the right to request the restriction of processing of your personal data.
If the processing of your personal data was unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you require it to assert, defend, or claim legal rights, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have filed an objection under Art. 21 para. 1 GDPR, a balancing of your and our interests must be conducted. Until it is determined whose interests outweigh, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data has been restricted, such data – apart from its storage – may only be processed with your consent, for the assertion, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.