privacy policy
Privacy Policy
In the following we would like to inform you about our privacy policy. Here you will find information about the collection and utilisation of personal data when using this website. In so doing, we comply with the data protection law applicable in Germany. You can retrieve this statement at any time on this website.
We would like to expressly point out that data transmission via the Internet (for example, through e-mail communication) has security gaps and cannot be completely protected from access by third parties.
It is expressly specified that the contact data in our legal notice should not be used for commercial advertising, unless we have given our prior written consent or there is an existing business relationship.
The provider and all persons listed on this website hereby object to any commercial use and disclosure of their data.
All data collected here is treated in strict confidence within our area of responsibility in accordance with the provisions of the European General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations that apply to us, such as the Federal Data Protection Act (Bundesdatenschutzgesetz-BDSG) and the Telemedia Act (Telemediengesetz-TMG).
Personal Data
The functioning and communication of our service depend on the data of our users. Personal data refers to all information that can be clearly traced back to a specific natural person, and is particularly sensitive in this context. Under the GDPR, we are obligated to list the entire scope of such data. When you use this website, the following personal data may be collected in accordance with the GDPR:
Company
First name and Surname
Address
E-mail address
IP address
This data is accumulated when you use the following functions:
Seminar bookings
Booking event tickets
Subscriptions to newsletters
Photo and video recordings
Photo and video recordings
Within the scope of events or seminars of BUK Management GmbH, BK Brockmann-Knödler GmbH, Entelechie GmbH or Jana Eichler ORGÆNIC Salon Berlin, the film team of BUK Management GmbH may take photographs and film recordings upon prior notice. These are used exclusively for advertising the events of BUK Management GmbH (An der Frauenkirche 1, 01067 Dresden), ORGÆNIC Salons Dresden (BK Brockmann-Knödler GmbH, An der Frauenkirche 1, 01067 Dresden), ORGÆNIC Salons Chemnitz (Entelechie GmbH, Theaterplatz 4, 09111 Chemnitz) or ORGÆNIC Salons Berlin (Jana Eichler, Berliner Freiheit 2, 10785 Berlin) for the web and social media (Facebook, Instagram, Youtube). Using these recordings for purposes other than those specified or placing them on the market by transfer to third parties
(with the exception of the above) is not permitted. You hereby agree to the free use of the photographs/film recordings of yourself for the purposes described above, unless you object in writing upon registration for the seminar or event. This consent is voluntary and can be revoked at any time. In addition, you are entitled to request information about your personal data that we store. You can assert your data protection rights by sending an e-mail to welcome@buk-management.com or by contacting BUK Management GmbH, An der Frauenkirche 1, 01067 Dresden or ORGÆNIC Salon Dresden (BK Brockmann-Knödler GmbH, An der Frauenkirche 1, 01067 Dresden) or ORGÆNIC Salons Chemnitz (Entelechie GmbH, Theaterplatz 4, 09111 Chemnitz) or ORGÆNIC Salons Berlin (Jana Eichler, Berliner Freiheit 2, 10785 Berlin).
For what purposes and on what legal basis do we process your data?
Processing of customer and contract data
For the fulfilment of contractual obligations pursuant to Article 6 para.1b of the GDPR we process your data to initiate, conclude, execute and terminate a contract with you for the supply of our products/services.
Within the scope of balancing of interests pursuant to Article 6 para. 1f of the GDPR
If necessary, we process your data beyond the actual performance of the contract to protect legitimate interests pursued by us or by third parties. For example: For advertising, unless you have objected to the use of your data, for verifying your creditworthiness, asserting of legal claims and defending in legal disputes, video surveillance to safeguard domestic authority where applicable, and to guarantee IT security and IT operations
Based on your consent pursuant to Article 6 para. 1a of the GDPR
We also process your data based on your consent for processing your personal data for specific purposes (for example, receipt of a newsletter).
Based on the statutory requirements pursuant to Article 6 para.1c of the GDPR
We process your data on the basis of various legal obligations, for example, Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code Code (Abgabenordnung AO) as well as the ‘GoBD’ directive [Principles for the proper management and storage of books, records and documents in electronic form, as well as data access] for the storage of tax-related data, plus other relevant laws.
Obligation to provide data
It may be necessary to provide personal data for initiating, concluding, executing and terminating a contract for the supply of our products, which we have concluded with you. The services that are offered in the retail store or on this website cannot be utilised and/or the products cannot be delivered unless such data has been provided. Excluded from this are all processes in which you can acquire our products or services without providing your personal data, for example, in the retail store for payment in cash.
Recipient of the data
Within this company, only the employees who need your data to fulfil our contractual and statutory obligations will have access to the data. Service providers and vicarious agents who are contractually obligated by us may receive data for these purposes if the persons involved are obligated to secrecy and the written data protection instructions are observed. These mainly include companies from the categories listed below: Support/maintenance of EDP/IT applications, web hosts, archiving, call centre services, destruction services for documents and data carriers, purchase/procurement, collection of claims, processing of giro transfer forms such as credit cards, lettershops, marketing agencies, tax consultants for preparing monthly and annual financial statements, post and transport services, payment transactions, assertion of legal claims, and defence in legal disputes.
Information, correction and deletion of your personal data
Your legal right to information, correction or deletion of your personal data remains unaffected. Please contact us using the contact options given below if you wish to view, change or delete your personal data.
Your personal data will be stored for as long as such storage is necessary to fulfil our contractual and statutory obligations. Your data will be deleted after said period, unless storage is required based on the statutory retention periods (for example, compliance with the 10year retention periods stipulated under the commercial and tax law).
Transfer of data to third parties
As a basic principle, we do not disclose your data to third parties. We also take appropriate measures and carry out routine checks to ensure that the data collected by us cannot be viewed or accessed by third parties.
Within our company, only the employees who need your data to fulfil our contractual and statutory obligations will have access to the data. Service providers and vicarious agents contractually obligated by us may receive data for said purposes if the persons involved are obligated to secrecy and written data protection instructions are observed. These mainly include companies from the categories listed below: Support/maintenance of EDP/IT applications, web hosts, archiving, destruction services for documents and data carriers, purchase/procurement, collection of claims, payment transactions, lettershops, marketing agencies, tax consultants, lawyers, post and transport service providers
Transfer of data to a third country or an international organisation
Data is not transferred to countries outside the EU or the EEA.
If service providers in a so-called third country are involved, they are bound by written instructions and undertake to comply with the data protection level in Europe by an agreement containing the standard contract clauses of the EU.
Right to information and right of objection
You are entitled to be informed about the relevant personal data and to have it corrected or deleted or to have processing restricted, or the right to object to the processing as well as the right to data portability. You can object to the consent given by you for processing at any time with effect for the future. Furthermore, you are entitled to file a complaint with a supervisory authority.
Does an automated decision-making, inclusive of profiling, take place?
No, it does not.
Use of cookies
We also use so-called cookies for the purpose of improving our websites. Cookies are text files containing information that your web browser stores on your computer when you open one of our websites. We use this cookie technology to customise our websites to your preferred areas of interest. If you wish to prevent the use of cookies, you can refuse to accept cookies in your browser. Please see the instructions of your browser manufacturer to know how that works specifically.
Accepting cookies is not a prerequisite for visiting this website. However, please note that the functionalities of this website and service may be restricted if you do not allow us to set cookies. What are cookies? Cookies are small files stored on your data carrier, which contain specific settings and data for exchange with our system via your browser. Basically there are two different types of cookies – the so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your data carrier for a longer period or indefinitely. This storage helps us to suitably structure our web pages and our offerings for you and facilitates your use, for example, by storing certain entries made by you in such a way that you do not have to repeat them constantly.
Log files
Whenever you access the pages of the BUK Management GmbH, usage data is transmitted through the respective Internet browser and stored in the so-called server log files. The data records stored in this process contain the following data: Date and time of access, name of the page accessed, IP address, referrer URL (origin URL
Secure data transmission
We transmit your personal data securely using encryption methods. This applies to seminar bookings, logins or registration data. We use the SSL (Secure Sockets Layer) cryptographic protocol. A SSL certificate is a small data file that digitally binds a cryptographic key to an organization’s details. When installed on a web server, it activates the security lock and the https protocol and enables secure connections from a web server to a browser. Furthermore, we implement technical and organisational measures to protect our websites and other systems against loss, destruction, access, modification or distribution of your data by unauthorised persons.
Newsletter
If you would like to subscribe to our newsletter, you will need to specify your e-mail address to which we can send the newsletter. By specifying your e-mail address, you agree that we may use it to send you the newsletter to keep you informed about the latest news from our ORGÆNIC Salon Dresden, Chemnitz, Zwickau and Berlin, ORGÆNIC Academy, ORGÆNIC Lifestyle Haircare or EIGHT WEEKS corporate divisions.
We use the so-called double opt-in process for sending the newsletter, i.e., we will send you a newsletter by e-mail only if we have already received your express confirmation that we should activate the newsletter service. We will send you a notification e-mail regarding this and ask you to confirm that you really want to receive our newsletter by clicking on a link contained in this e-mail.
Should you no longer wish to receive newsletters from us you can revoke this at any time. In this regard, a written notification made to the address listed on the contact details page (e.g. e-mail, fax, letter) shall suffice. You may of course opt to unsubscribe from the newsletter at any time and revoke the consent given by you for the future. You will find a link to unsubscribe from the newsletter at the end of each newsletter. If you have subscribed only to the newsletter and have terminated this subscription, your personal data will be deleted.
Dispatch service provider e-mails: The confirmation and reminder mails are dispatched by Sendinblue, Köpenicker Str. 126 in 10179 Berlin. The newsletter is dispatched by the same provider, as long as no other provider is listed for the dispatch of newsletters. The data protection regulations of the dispatch service provider can be viewed here: https://de.sendinblue.com/legal/privacypolicy/.
Contact
We collect personal data if you provide it to us voluntarily, for example, when you contact us. We will, of course, use the personal data transmitted to us in this way only for the purpose for which you made such data available to us when you contacted us. This information is communicated on a strictly voluntary basis and with your consent. If this involves information regarding channels of communication (such as e-mail address, telephone number), you also agree that we may also contact you via this communication channel if necessary in order to respond to your request. You can, of course, revoke your declarations of consent at any time with effect for the future. To do this, please contact our data protection officer, whose contact details you will find below.
No data transmission to third parties
Your data will not be transmitted to third parties unless we are legally obligated to do so. Should external service providers come into contact with your personal data, we will have taken legal, technical and organisational measures to ensure that they comply with the data protection regulations. Your data will therefore be transmitted only if it is necessary to fulfil a contract with you as the customer.
Use of YouTube-Plugins
Each of our Internet pages contain a plugin from YouTube, belonging to Google Inc. based in San Bruno/California, USA. A connection is established to the YouTube servers as soon as you visit YouTube plugin-equipped pages of our website. The Youtube server is thus informed about the specific page of our website that you visited. However, if you are logged into your YouTube account, you would allow YouTube to associate your browser history directly with your personal profile. You can restrict the possibility of such association by logging out of your account beforehand. For more information on YouTube’s collection and use of your data, please refer to YouTube’s data protection policy at www.youtube.com. YouTube does not have its own data protection statement. Google’s data protection regulations serve as a
data protection statement for the use of YouTube, as it does for all Google services.
According to Google’s data protection regulations, stored information primarily includes the personal data provided by each user during registration, or subsequently, in their account. This includes name, e-mail address, telephone number and date of birth. In addition, however, large volumes of information are obtained by analysing the use of Google services. This includes data on the location, IP addresses and devices used.
In the special case of YouTube, the activities there are of particular importance. Thus, your browser history and the videos you are watching are recorded. Cookies can also be used to uniquely identify the device and associate the activities with your Google account.
Doubleclick by Google
DoubleClick by Google is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to display relevant advertisements. Your browser is assigned a pseudonymized identification number (ID) to track which advertisements have been shown in your browser and which ones have been clicked on. The cookies do not contain any personal information. The use of DoubleClick cookies only allows Google and its partner websites to display advertisements based on previous visits to our or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. Google transmits data to third parties only if it is legally obligated to do so or only within the scope of the commissioned data processing. Under no circumstances will Google associate your data with other data collected by Google. By using our websites, you agree to the processing of data collected about you by Google, as well as to the procedure and purpose of the data processing described above. You may prevent the storage of cookies by configuring the appropriate settings in your browser software. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website. In addition, you can also prevent Google from acquiring the data generated by the cookies with regard to your use of the websites and prevent the processing of that data by Google. If you use Google Chrome or Chromium, then – in addition to the configurations in the “Settings” menu – you can install a plugin that deactivates personalised advertising. This plugin is available at the website https://www.google.com/settings/ads/plugin. Please note, however, that you will see exactly the same number of advertisements as before – but these advertisements will no longer be customised to your browsing history.
Privacy policy for the use of Google Suite
We use Google Forms to create and conduct surveys to improve our services. In the data protection-compliant professional version of “G Suite”. The data collected on Google Forms form will be stored on the “Google Drive” cloud storage provided for us by Google. Furthermore, we collect data and files that you can upload via other forms, which are also stored in Google Drive. We also store data there that we receive from you via e-mail, messenger services or other electronic and analogue channels, insofar as this is necessary for the planning, implementation or processing of surveys or other services carried out by us.
For more information about data processing in connection with Google Forms and Google Drive, please refer to Google’s privacy policy https://www.google.com/intl/de/policies/privacy/
Further guidance on managing your own data in connection with Google products can be found on the site operated by Google at https://www.dataliberation.org/.Google offers its customers features and contractual commitments designed to comply with EU data protection requirements and the privacy recommendations of the Article 29 Working Party. G Suite offers EU model contract clauses and a data processing addendum. It has also been certified that G Suite is in compliance with the UK Government’s “OFFICIAL” (including “OFFICIAL – SENSITIVE”) security principles and may be used accordingly. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. You can find Google’s privacy policy in this regard at the following links: https://gsuite.google.com/terms/mcc_terms.html
Data privacy statement for Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We have activated IP anonymisation on this website. Your IP address will be truncated by Google within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
Google will use this information on behalf of this website’s operator to analyse your use of the website, to compile reports on website activities and to provide the website operator with other services related to the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data owned by Google. You may prevent the storage of cookies by configuring your browser settings accordingly; however, please note that by doing so you may be prevented from using the full range of this website’s functions.
You can also prevent Google from acquiring the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available under the following link //tools.google.com/dlpage/gaoptout.
You can prevent the acquisition of data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent future acquisition of your data when you visit this website:
Disable Google Analytics
For more information on terms of use and data privacy, please visit //www.google.com/analytics/terms/de.html or //www.google.de/intl/de/policies/. Please note that the code “anonymizeIp” has been added to Google Analytics on this website to ensure anonymous acquisition of IP addresses (so-called IP masking). (Source: www.datenschutzbeauftragter-info.de)
All data stored with Google Analytics will be stored only for the retention period of 14 months specified by us and will be automatically deleted by Google Analytics upon expiry of this period.
Data privacy statement for Google Maps
This Web page uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. Further information about handling user data can be found in Google’s data privacy statement: //www.google.de/intl/de/policies/privacy/
Use of Facebook Social Plugins
Our websites use so-called social plugins (“plugins”) of the social network Facebook, which is operated by Facebook Inc. 1601S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). When you access a page of this website that contains this plugin, your browser establishes a direct link to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the Web page. The link lets Facebook know that you are visiting this page of our website with your browser, even if you do not have a Facebook profile or are currently not logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign the visit to this website directly to your Facebook profile. If you interact with the plug-ins, for example by clicking ‘Like’, or posting a comment, the corresponding information is transmitted from your browser directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
For the purpose and scope of the data acquisition, and further processing and use of the data by Facebook, as well as your rights in this connection, and the setting options to protect your privacy, please refer to Facebook’s data protection information.
If you do not wish Facebook to assign the data collected via this website directly to your Facebook profile, you must log out of Facebook before visiting this website.
Use of Instagram Social Plugins
Our websites use so-called Social Plugins (“Plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plug-ins are labelled with an Instagram logo, for example, in the form of an “Instagram camera”. When you access Instagram via this website, your browser establishes a direct link to Instagram’s servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. The link lets Instagram know that your browser has accessed the corresponding page of this website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can assign the visit to this website directly to your Instagram account. If you interact with the plugins, for example, by clicking on the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and signalled to your contacts there. For the purpose and scope of the data acquisition, and further processing and use of the data by Instagram, as well as your rights in this respect, and the setting options to protect your privacy, please refer to Instagram’s data privacy policy.
If you do not wish Instagram to assign the data collected via this website directly to your Instagram account, you must log out of Instagram before visiting this website.
Data privacy statement for the use of Pinterest
Our websites use so-called Social Plugins (“Plugins”) of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”). When you access a website of BUK Management GmbH that contains this plugin, your browser establishes a direct connection to the Pinterest servers. The content of the plugin is transmitted by Pinterest directly to your browser and integrated into the Web page. This link lets Pinterest know that your browser has accessed the corresponding page of this website, even if you do not have a Pinterest profile or are not currently logged in to Pinterest. This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there.
If you are logged in to Pinterest, Pinterest can assign the visit to this website directly to your Pinterest profile. If you interact with the plugins, for example, by clicking on the “Pin it” button, this information is also transmitted directly to a Pinterest server and stored there. The information is also published on Pinterest and signalled to your contacts there.
For the purpose and scope of the data acquisition, and further processing and use of the data by Pinterest, as well as your rights in this respect, and the setting options to protect your privacy, please refer to Pinterest’s data privacy policy.
The information is also published on Pinterest and displayed to your contacts there. For the purpose and scope of the data acquisition, and further processing and use of the data by Pinterest, as well as your rights in this respect, and the setting options to protect your privacy, please refer to Pinterest’s data privacy policy.
If you do not wish Pinterest to assign the data collected via this website directly to your Pinterest profile, you must log out of Pinterest before visiting this website.
Data subject’s right to obtain information
Pursuant to the Federal Data Protection Act, our customers are entitled to be informed free of charge about the data stored about them and, if necessary, to request that this data be rectified, blocked or erased. We take the protection of your data very seriously. To ensure that personal data is not disclosed to third parties, please send your request by e-mail or by post, clearly identifying yourself, to: BUK Management GmbH, An der Frauenkirche 1, 01067 Dresden, 0351.4843380 or to welcome@buk-management.com or please contact our data protection officer directly.
Data protection officer of BUK Management GmbH
Ms. Kerstin Herschel
PRODATIS CONSULTING AG
Landhausstraße 8
01067 Dresden
dsb@prodatis.com
Amendments to this Data Privacy Statement
We reserve the right to amend this Data Privacy Statement at any time in compliance with the applicable data protection regulations. This version was created in April 2018.
Information obligations of
BK Brockmann-Knödler GmbH
Information obligations pursuant to Art. 13 GDPR for our applicants
Information obligations pursuant to Art. 13 GDPR for our business partners
Information obligations pursuant to Art. 13 GDPR for our customers
Disclaimer
Contents & Limitation of Liability
The websites of BUK Management GmbH have been compiled with the greatest possible care. Nevertheless, we cannot guarantee that the information contained therein is accurate and up to date. We exclude any liability for damages arising directly or indirectly from the use of our websites. The contents of this website are utilised at the user’s own risk. The mere use of the provider’s website does not imply any contractual relationship whatsoever between the user and the provider.
External Links
The websites of BUK Management GmbH contain links to third party websites (“external links”). These websites are subject to the liability of their respective operators. The provider has checked the external content for any legal infringements, prior to including the external links for the first time. No legal infringements were apparent at that point in time. The provider has no influence whatsoever on the current and future design and content of the linked Web pages. The use of external links does not imply that the provider adopts the content of the reference or link as his own. It is unreasonable for the provider to constantly monitor the external links without specific notification of legal infringement. However, if we become aware of any legal infringements, such external links will be deleted immediately.
Copyright and ancillary copyrights
The content of this Web page of BUK Management GmbH are subject to German copyright and ancillary copyrights. No part of this website may be copied, duplicated, distributed, edited, translated, reproduced or stored, primarily in databases or other electronic media and systems, without the written permission of the provider. The content and rights of third parties are acknowledged as such. This website may not be copied, republished, transferred or distributed without the consent of BUK Management GmbH. Unauthorised duplication or circulation of individual content or complete pages is not permitted and subject to prosecution. Production of copies and downloads is permitted for personal, private and non-commercial use only. The presentation of this website in external frames is only permitted with written permission.