Data privacy policy

In this privacy policy, we inform you about the pro­cessing of your per­sonal data. If you want to change your privacy set­tings please use our privacy banner “manage consent”.

Data pro­tection officer

You can reach our data pro­tection officer at:

z.H. Dr. Thorsten Büsser,
Alte Fal­terstr. 25
D‑65933 Frankfurt am Main, Germany
Phone: +49 (0) 69 – 97 58 12 – 0
Email: thorsten.buesser@hlp-bach-buesser.de

The fol­lowing data pro­tection dec­la­ration applies to the use of our online offer https://hlp-bach-buesser.de (here­inafter “website”). We attach great impor­tance to data pro­tection. The col­lection and pro­cessing of your per­sonal data is carried out in accor­dance with the applicable data pro­tection reg­u­la­tions, in par­ticular the Basic Data Pro­tection Reg­u­lation (DSGVO). We collect and process your per­sonal data in order to offer you the above-men­tioned portal. This dec­la­ration describes how and for what purpose your data is col­lected and used and what choices you have in con­nection with per­sonal data. By using this website, you consent to the col­lection, use and transfer of your data in accor­dance with this privacy policy.

1 Respon­sible

The person respon­sible for the col­lection, pro­cessing and use of your per­sonal data within the meaning of Art. 4 No. 7 DSGVO is [HLP Bach&Büsser Coaching Training Con­sulting GbR] If you wish to object to the col­lection, pro­cessing or use of your data by us in accor­dance with these data pro­tection reg­u­la­tions, either in total or for indi­vidual mea­sures, you can address your objection to the person respon­sible. You can save and print out this data pro­tection dec­la­ration at any time.

2 General use of the website

2.1 Hosting

The hosting ser­vices we use serve to provide the fol­lowing ser­vices: Infra­structure and platform ser­vices, com­puting capacity, storage space and database ser­vices, security ser­vices and tech­nical main­te­nance ser­vices that we use for the purpose of oper­ating the website. For this purpose, we or our hosting provider process inventory data, contact data, content data, con­tract data, usage data, meta and com­mu­ni­cation data of cus­tomers, inter­ested parties and vis­itors of this online offer on the basis of our legit­imate interests in an effi­cient and secure pro­vision of this online offer in accor­dance with Art. 6 para. 1 sen­tence 1 f) DSGVO in con­junction with Art. 28 DSGVO.

2.2 Access data

We collect infor­mation about you when you use this website. We auto­mat­i­cally collect infor­mation about your usage pattern and your inter­action with us and reg­ister data about your com­puter or mobile device. We collect, store and use data about every access to our online offer (so-called server log files). These access data include:

  • Name and URL of the accessed file
  • Date and time of retrieval
  • data volume transferred
  • Message about suc­cessful retrieval
    (HTTP response code)
  • Browser type and version
  • Oper­ating system
  • Referrer URL (i.e. the pre­vi­ously visited page)
  • Web­sites that are called up by the user’s system via our website
  • Internet service provider of the user
  • IP address and the inquiring provider ‑We use this log data without allo­cation to your person or other pro­filing for sta­tis­tical eval­u­a­tions for the purpose of the oper­ation, security and opti­mization of our online offer, but also for the anonymous recording of the number of vis­itors to our website (traffic) as well as the extent and type of use of our website and ser­vices, as well as for billing pur­poses to measure the number of clicks received from coöper­ation partners. Based on this infor­mation, we can provide per­son­alized and location-based content and analyze traffic, trou­bleshoot and correct errors and improve our ser­vices. This is also our legit­imate interest according to Art 6 Para­graph 1 S. 1 f) DSGVO. We reserve the right to check the log data ret­ro­spec­tively if there is a jus­tified sus­picion of unlawful use based on con­crete evi­dence. We store IP addresses in the log files for a limited period of time if this is nec­essary for security pur­poses or if it is nec­essary for the pro­vision of a service or the invoicing of a service, e.g. if you use one of our offers. After can­cel­lation of the order process or after receipt of payment, we delete the IP address if it is no longer required for security pur­poses. We also store IP addresses if we have a con­crete sus­picion of a criminal offense in con­nection with the use of our website. We also save the date of your last visit as part of your account (e.g. during reg­is­tration, login, clicking on links, etc.).


2.3 Cookies

We use so-called session cookies to optimize our online offer. A session cookie is a small text file that is sent by the respective servers when you visit a website and is tem­porarily stored on your hard drive. This file as such con­tains a so-called session ID with which various requests from your browser can be assigned to the common session. This enables your com­puter to be rec­og­nized when you return to our website. These cookies are deleted after you close your browser. They serve, for example, to enable you to use the shopping basket function over several pages. We also use per­sistent cookies (also small text files that are stored on your ter­minal device) to a small extent, which remain on your ter­minal device and enable us to rec­ognize your browser on your next visit. These cookies are stored on your hard drive and delete them­selves after the spec­ified time. Their lifetime is between 1 month and 10 years. This enables us to present our offer to you in a more user-friendly, effective and secure manner and, for example, to display infor­mation on the site that is spe­cially tai­lored to your interests. Our legit­imate interest in the use of cookies in accor­dance with Art 6 Para­graph 1 S. 1 f) DSGVO is to make our website more user-friendly, more effective and safer. The fol­lowing data and infor­mation are stored in the cookies:

  • Log-in infor­mation
  • Lan­guage settings
  • search terms entered
  • Infor­mation about the number of times our website is called up and the use of indi­vidual func­tions of our Internet presence.

When the cookie is acti­vated, it is assigned an iden­ti­fi­cation number and your per­sonal data is not assigned to this iden­ti­fi­cation number. Your name, IP address or similar data that would allow the cookie to be assigned to you will not be placed in the cookie. On the basis of cookie tech­nology, we only receive pseu­do­nymized infor­mation, for example about which pages of our shop were visited, which products were viewed, etc. You can set up your browser so that you are informed in advance about the setting of cookies and can decide in each indi­vidual case whether you want to exclude the accep­tance of cookies for spe­cific cases or in general, or whether cookies should be pre­vented com­pletely. This may limit the func­tion­ality of the website.

2.3.1. Google Analytics

Our website uses Google Ana­lytics, a web ana­lytics service pro­vided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To deac­tivate Google Ana­lytics, Google pro­vides a browser plug-in at http://tools.google.com/dlpage/gaoptout?hl=de.

Google Ana­lytics uses cookies. These enable an analysis of the use of our website by Google. The infor­mation col­lected by the cookie about the use of our website (including your IP address) is usually trans­ferred to a Google server in the USA and stored there.

We would like to point out that on this website Google Ana­lytics has been extended by the code “gat._anonymizeIp();” in order to guar­antee an anonymized col­lection of IP addresses (so-called IP-Masking). If the anonymi­sation is active, Google will shorten IP addresses within member states of the European Union or in other states that are party to the Agreement on the European Eco­nomic Area, which means that no con­clu­sions can be drawn about your identity. Only in excep­tional cases will the full IP address be trans­ferred to a Google server in the USA and shortened there.

2.3.1.1. Use of Google Ana­lytics according to the DSGVO

In order to use Google Ana­lytics in a legally com­pliant manner, we fulfil the nec­essary pre­req­ui­sites for this:

  • The con­tract for com­mis­sioned data pro­cessing concluded
  • IP anonymization enabled
  • Privacy policy updated
  • Opt-Out Cookies + Link to Browser PlugIn set

1. Con­tract

Bach&Büsser has con­cluded a so-called AV (Order Pro­cessing) Agreement with Google. With the validity of the DSGVO, this is now also pos­sible elec­tron­i­cally in our Google Ana­lytics account, directly in your. The old pro­cedure of printing out and sending it by mail to Google is thus no longer necessary.

2. IP Anonymization

The fol­lowing set­tings were made on this page:

  • Enable Anonymous IP: This para­meter is required by European Union law.

3. Privacy policy updated

This privacy policy has been updated.

The data pro­cessing sup­plement has been accepted and approved for this con­tract our account. Fur­thermore, other ser­vices have been activated.

  • Enable demo­graphics and interest reports: This setting will add demo­graphics and remar­keting fea­tures to the Google Ana­lytics tracking code. Google Analaytics Doc­u­men­tation.
  • Enable advanced link attri­bution: Advanced link attri­bution improves the accuracy of in-page analysis reports. Links to the same URL are auto­mat­i­cally dis­tin­guished by link element IDs.

4. Opt-out Link / Tracking dis­abling /enabling yourself

  • Google Ana­lytics Opt-out: With this link, you can disable tracking: Erlaube Google Ana­lytics, mich zu verfolgen
  • Unless the user has already rejected the use of cookies when accessing the site (cookies are only acti­vated after accep­tance of the cookie use, after which the site is reloaded), the user can deac­tivate Google Ana­lytics here again.
  • Fur­thermore, the user can manage his own data via the link in the footer “DSGVO Tools”.

2.3.2. Google Fonts

For the text (Copy, H1-H6) on our page, we use the font “Quicksand”: All Google fonts are hosted locally on our server.


2.4 Email contact

If you contact us (e.g. via contact form or e‑mail), we will save your details for the purpose of pro­cessing your enquiry and in the event that follow-up ques­tions arise. This is also in our legit­imate interest according to Art 6 Para­graph 1 S. 1 f) DSGVO. We only store and use other per­sonal data if you consent to this or if this is legally per­mis­sible without special consent.


2.5 Storage duration

Unless specif­i­cally stated, we only store per­sonal data for as long as it is nec­essary to fulfill the pur­poses pursued.


2.6 Legal basis and storage duration

The legal basis for data pro­cessing in accor­dance with the above para­graphs is Art. 6 para. 1 sen­tence 1 a), b) and f) DSGVO. Our interests in data pro­cessing are in par­ticular the ini­ti­ation, con­clusion, and ful­fillment of con­tracts as well as direct adver­tising and product infor­mation. Unless specif­i­cally stated, we only store per­sonal data for as long as this is nec­essary or legally required to fulfill the pur­poses pursued.


3 Your rights as a data subject

Under applicable laws, you have various rights regarding your per­sonal infor­mation. If you wish to exercise these rights, please send your request by e‑mail or by post, clearly iden­ti­fying yourself, to the address men­tioned in point 1. Below you will find an overview of your rights.


3.1 Right to con­fir­mation and information

You have the right to obtain con­fir­mation from us at any time as to whether per­sonal data con­cerning you is being processed. If this is the case, you have the right to request from us free infor­mation about the per­sonal data stored about you, together with a copy of this data. Fur­thermore, you have the right to receive the fol­lowing information:

1. the pro­cessing pur­poses;
2. the cat­e­gories of per­sonal data processed
3. the recip­ients or cat­e­gories of recip­ients to whom the per­sonal data have been or will be dis­closed, in par­ticular in the case of recip­ients in third coun­tries or inter­na­tional orga­ni­za­tions;
4. if pos­sible, the envisaged duration for which the per­sonal data will be stored or, if that is not pos­sible, the cri­teria for deter­mining that duration;
5. the exis­tence of a right of rec­ti­fi­cation or erasure of per­sonal data con­cerning you or of a right of oppo­sition to or lim­i­tation of the pro­cessing by the con­troller;
6. the exis­tence of a right of appeal to a super­visory authority;
7. if the per­sonal data are not col­lected from you, all available infor­mation on the origin of the data;
8. the exis­tence of auto­mated decision-making, including pro­filing, in accor­dance with Article 22 para­graphs 1 and 4 FADP, and, at least in these cases, mean­ingful infor­mation about the logic involved and the scope and intended impact of such pro­cessing on you. If per­sonal data are trans­ferred to a third country or to an inter­na­tional orga­ni­zation, you have the right to be informed of the appro­priate safe­guards pur­suant to Art. 46 FADP in con­nection with the transfer.


3.2 Right of rectification

You have the right to ask us to correct incorrect per­sonal data con­cerning you without delay. Taking into account the pur­poses of the pro­cessing, you have the right to request the com­pletion of incom­plete per­sonal data, including by means of a sup­ple­mentary declaration.


3.3 Right of can­cel­lation (“right to be forgotten”)

Pur­suant to Art. 17 para. 1 DSGVO, you have the right to demand that we delete per­sonal data relating to you without delay, and we are obliged to delete per­sonal data without delay if one of the fol­lowing reasons applies::

1. the per­sonal data are no longer nec­essary for the pur­poses for which they were col­lected or oth­erwise processed
2. you revoke your consent on which the pro­cessing was based pur­suant to Art. 6 para. 1 sen­tence 1 a) DSGVO or Art. 9 para. 2 a) DSGVO, and there is no other legal basis for the pro­cessing.
3. you lodge an objection to the pro­cessing pur­suant to Art. 21(1) DPA and there are no over­riding legit­imate reasons for the pro­cessing, or you lodge an objection to the pro­cessing pur­suant to Art. 21(2) DPA.
4. the per­sonal data have been processed unlaw­fully
5. the deletion of the per­sonal data is nec­essary to comply with a legal oblig­ation under Union law or the law of the Member States to which we are subject
6. the per­sonal data have been col­lected in relation to infor­mation society ser­vices offered, in accor­dance with Article 8(1) of the DSGVO
If we have made the per­sonal data public and we are obliged to delete it pur­suant to Art. 17 para. 1 DSGVO, we shall take rea­sonable mea­sures, including tech­nical mea­sures, taking into account the available tech­nology and the imple­men­tation costs, to inform data con­trollers who process the per­sonal data that you have requested them to delete all links to this per­sonal data or copies or repli­ca­tions of this per­sonal data.


3.4 Right to restrict processing

You have the right to demand that we restrict the pro­cessing if one of the fol­lowing con­di­tions is met:
1. the accuracy of the per­sonal data is dis­puted by you, for a period of time that allows us to verify the accuracy of the per­sonal data
2. the pro­cessing is unlawful and you refused to delete the per­sonal data and instead requested the restriction of the use of the per­sonal data
3. we no longer need the per­sonal data for the pur­poses of the pro­cessing, but you need the data to assert, exercise or defend legal claims; or
4. you have lodged an objection to the pro­cessing in accor­dance with Art. 21 para. 1 DSGVO, as long as it has not yet been estab­lished whether the legit­imate reasons of our company out­weigh yours.


3.5 Right to data transferability

You have the right to receive the per­sonal data con­cerning you that you have pro­vided to us in a struc­tured, common and machine-readable format and you have the right to transfer this data to another respon­sible person without hin­drance from us, pro­vided that
1. the pro­cessing is based on a consent pur­suant to Art. 6 para. 1 sen­tence 1 a) DSGVO or Art. 9 para. 2 a) DSGVO or on a con­tract pur­suant to Art. 6 para. 1 sen­tence 1 b) DSGVO and
2. the pro­cessing is carried out by means of auto­mated pro­ce­dures.
When exer­cising your right to data transfer in accor­dance with para­graph 1, you have the right to obtain that the per­sonal data be trans­ferred directly from us to another con­troller, insofar as this is tech­ni­cally feasible.


3.6 Right of objection

You have the right to object at any time, for reasons arising from your par­ticular sit­u­ation, to the pro­cessing of per­sonal data con­cerning you that is carried out on the basis of Article 6 para­graph 1, sen­tence 1 e) or f) FADP; this also applies to pro­filing based on these pro­vi­sions. We will no longer process the per­sonal data unless we can demon­strate com­pelling reasons for pro­cessing that are worthy of pro­tection and out­weigh your interests, rights and freedoms, or unless the pro­cessing serves to assert, exercise or defend legal claims. Where per­sonal data are processed by us for the purpose of direct mar­keting, you have the right to object at any time to the pro­cessing of per­sonal data relating to you for the purpose of such mar­keting, including pro­filing, insofar as it relates to such direct mar­keting. You have the right to object, for reasons arising from your par­ticular sit­u­ation, to the pro­cessing of per­sonal data con­cerning you for the pur­poses of sci­en­tific or his­torical research or for sta­tis­tical pur­poses in accor­dance with Art. 89, para. 1 of the DPA, unless the pro­cessing is nec­essary for the per­for­mance of a task carried out in the public interest.


3.7 Auto­mated deci­sions including profiling

You have the right not to be subject to a decision based solely on auto­mated pro­cessing, including pro­filing, that has legal effect on you or sig­nif­i­cantly affects you in a similar manner. No auto­mated decision-making based on the per­sonal data col­lected will take place.


3.8 Right to revoke a data pro­tection consent

You have the right to revoke your consent to process per­sonal data at any time.


3.9 Right of appeal to a super­visory authority

You have the right to com­plain to a super­visory authority, in par­ticular in the Member State of your res­i­dence, place of employment or place of sus­pected infringement, if you con­sider that the pro­cessing of per­sonal data con­cerning you is unlawful.


4 Data security

We make every effort to ensure the security of your data within the framework of the applicable data pro­tection laws and tech­nical pos­si­bil­ities. Your per­sonal data will be trans­mitted encrypted. This applies to your orders and also to the cus­tomer login. We use the SSL (Secure Socket Layer) coding system, but we would like to point out that data trans­mission on the Internet (e.g. when com­mu­ni­cating by e‑mail) can have security gaps. Com­plete pro­tection of data against access by third parties is not pos­sible. To protect your data, we maintain tech­nical and orga­ni­za­tional security mea­sures in accor­dance with Art. 32 DSGVO, which we con­tin­ually adapt to the state of the art. We also do not guar­antee that our offer is available at certain times; dis­tur­bances, inter­rup­tions, or failures cannot be excluded. The servers used by us are reg­u­larly and care­fully secured.


5 Transfer of data to third parties, no data transfer to non-EU countries

As a matter of prin­ciple, we only use your per­sonal data within our company. If and to the extent that we involve third parties in the ful­filment of con­tracts (such as logistics service providers), they will only receive per­sonal data to the extent that the trans­mission is nec­essary for the cor­re­sponding service. In the event that we out­source certain parts of the data pro­cessing (“con­tract pro­cessing”), we con­trac­tually oblige con­tract processors to use per­sonal data only in accor­dance with the require­ments of the data pro­tection laws and to ensure the pro­tection of the rights of the data subject. Data trans­mission to bodies or persons outside the EU outside the cases men­tioned in this dec­la­ration in section 2 does not take place and is not planned.