Privacy Policy

BANDKE Assekuranz-Makler UG (haftungsbeschränkt) takes the protection of your personal data very seriously. Personal data is only collected, processed or used if the data subject has given consent, if it is necessary for the performance of a contract, or if a law permits or requires its collection, processing or use.

With this privacy policy we would like to inform you about the details of data collection and data processing and about your rights in this context.

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other data protection provisions is:

BANDKE Assekuranz-Makler UG (haftungsbeschränkt)

Bayerische Str. 4

10707 Berlin, Germany

Phone: +49 177-820 7115

E-mail: help@bandke-assekuranz.de

2. Name and address of the data protection officer

No data protection officer has been appointed.

Any data subject can contact BANDKE Assekuranz-Makler UG (haftungsbeschränkt) directly at any time with questions and suggestions regarding data protection.

3. General information on the processing of personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

BANDKE Assekuranz-Makler UG (haftungsbeschränkt) generally only processes personal data if the user has given consent or if the data processing is permitted by law. The legal basis is Art. 6 (1) of the EU General Data Protection Regulation (GDPR). According to this provision, the processing of personal data is only lawful if the data subject has given consent (Art. 6 (1) (a) GDPR) or if the processing is necessary for one of the following purposes:

For the performance of a contract with the data subject or to take steps at the request of the data subject prior to entering into a contract (Art. 6 (1) (b) GDPR).

For compliance with a legal obligation of our company (Art. 6 (1) (c) GDPR).

To protect the vital interests of the data subject or of another natural person (Art. 6 (1) (d) GDPR).

For the performance of a task carried out in the public interest or entrusted to our company by the public administration (Art. 6 (1) (e) GDPR).

For the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests, fundamental rights and freedoms of the data subject which require protection of personal data (Art. 6 (1) (f) GDPR).

4. Storage period and erasure of data

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored beyond this if provided for by the legislator. The data will also be blocked or erased when a storage period prescribed by the aforementioned provisions expires, unless further storage of the data is necessary for the conclusion or performance of a contract. Prescribed storage periods in this sense include, for example, retention periods under tax or commercial law.

5. Collection of access data (creation of log files)

Each time the website of BANDKE Assekuranz-Makler UG (haftungsbeschränkt) is accessed, general data and information are automatically collected from the computer system of the accessing device and stored in the server's log files. The following data and information are collected:

Browser type including version used

Operating system of the accessing device

Date and time of access

IP address of the user

Internet service provider of the user

Websites from which our website is accessed

Websites and subpages accessed via our website

Other similar data and information used to avert danger in the event of attacks on our system

The data is stored anonymously in our system's log files. It is not linked to any other personal data of the user. BANDKE Assekuranz-Makler UG (haftungsbeschränkt) does not draw any conclusions about the data subject.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Storage is necessary to ensure the functionality of our website and the correct display of its content. The data is also used for our statistics and the ongoing optimisation of our content. Finally, data is stored in order to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.

The data is not passed on to third parties unless there is a legal obligation to disclose it.

As the collection and storage of the data in the log files is essential for the trouble-free operation of the website, the user has no right to object.

The data will be erased as soon as it is no longer required for the purpose for which it was collected. Where the data was collected to provide the website, this is the case when the internet session ends.

6. Cookies

We use cookies on our website. Cookies are text files that our server places on your computer in order to store certain data. Cookies usually contain a characteristic string of characters that allows the browser to be uniquely identified when the user visits the website again. This allows the accessing browser to be recognised and identified.

Cookies help us make it easier for you to use the website. By recognising the browser and storing previously entered data, the offers and content of our website can be individually optimised, as data you have entered (e.g. login details, search terms) does not have to be re-entered each time you visit the website. The legal basis for this is Art. 6 (1) (f) GDPR.

In addition, we use cookies on our website that enable an analysis of users' browsing behaviour. However, the data collected in this way is pseudonymised, i.e. the personal data is replaced by other identifiers (pseudonyms), so that the data subject can no longer be identified without additional information. Since your consent is obtained for this when you access the website, the legal basis for the processing of personal data using analysis cookies is Art. 6 (1) (a) GDPR.

As cookies are stored on the user's computer, you as the user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted by you at any time. However, if cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

7. Registration on our website

You have the option of registering as a user on our website. You enter the data into an input form, after which it is transmitted to us and stored by us. The personal data concerned can be seen from the input form. In addition, the user's IP address and the date and time of registration are stored. At the end of the registration process, we obtain the user's consent to data processing once again. The legal basis for the processing of personal data is therefore Art. 6 (1) (a) GDPR. With regard to the storage of the IP address, the legal basis is also Art. 6 (1) (f) GDPR. The data is not passed on to third parties unless there is a legal obligation to disclose it.

The registration of the data subject, with the voluntary provision of personal data, enables the controller to offer the data subject content or services that, by their nature, can only be offered to registered users. The other data is stored in order to prevent or detect misuse of the website and to ensure the security of our system.

As a registered user, you can change the personal data provided during registration or have it deleted completely at any time. To do so, you can use the functions in your account or inform us in writing or by e-mail of your request to change or delete the data.

8. Contact form and e-mail contact

The website of BANDKE Assekuranz-Makler UG (haftungsbeschränkt) provides a contact form that can be used to contact our company electronically. The data entered by the user in the input form is transmitted to us and stored. In addition, the user's IP address and the date and time of transmission are stored. The user's consent to the processing of the data is obtained as part of the sending process. The legal basis for the processing is therefore Art. 6 (1) (a) GDPR. With regard to the storage of the IP address, the legal basis is also Art. 6 (1) (f) GDPR.

Alternatively, you can contact us via the
e-mail address provided on our website. In this case, the e-mail address and the personal data included by the user in the e-mail are transmitted. In this respect, the legal basis is Art. 6 (1) (f) GDPR.

The data transmitted via the contact form or by e-mail is processed solely for the purpose of handling the requested contact. The other data is stored in order to prevent or detect misuse of the website and to ensure the security of our system. The data is not passed on to third parties unless there is a legal obligation to disclose it.

The data will be erased as soon as it is no longer required for the purpose for which it was collected. For the data transmitted by the user in the contact form or by e-mail, this is the case when the communication in question has ended, unless the content of the communication remains legally relevant thereafter.

The data subject may withdraw their consent to data processing or object to the use of the data at any time. In this case, it will no longer be possible to contact the user as intended, or communication that has already begun can no longer be continued.

9. Subscription to our newsletter

On the website of BANDKE Assekuranz-Makler UG (haftungsbeschränkt) you can subscribe to our company newsletter. The personal data transmitted to us and stored by us when ordering the newsletter can be seen from the input form used for this purpose. In addition, the user's IP address and the date and time of transmission are stored. The user's consent to the processing of the data is obtained as part of the registration process. The legal basis for the processing is therefore Art. 6 (1) (a) GDPR. With regard to the storage of the IP address, the legal basis is also Art. 6 (1) (f) GDPR. The data is not passed on to third parties unless there is a legal obligation to disclose it.

The processing of the data entered by the user in the registration form is necessary in order to send the newsletter. No further use is made of it. Storing the IP address is necessary to prevent or detect misuse (in particular of the e-mail address) and to ensure the security of our system.

The data subject may cancel the newsletter subscription at any time and thus withdraw consent to its dispatch. For this purpose, a corresponding link is provided in every newsletter e-mail sent. In this case – as with any other objection to the use of data, which is possible at any time – the personal data stored by us in connection with the newsletter subscription will be deleted. Accordingly, the data is stored for as long as the newsletter subscription is active.

10. Newsletter tracking

When sending newsletters, BANDKE Assekuranz-Makler UG (haftungsbeschränkt) collects statistical data. This is done by means of a so-called tracking pixel. This is an invisible miniature graphic that is embedded in the newsletter e-mail and downloaded to the user's computer when the e-mail is opened. The same applies when the user clicks on links provided in the e-mail. When the tracking pixel is downloaded, the time, the user's IP address and the browser type used are transmitted to our server and stored. The legal basis for this is Art. 6 (1) (f) GDPR.

The data is processed in order to optimise the newsletter. It enables a statistical evaluation of whether and when an e-mail was opened and which links in the e-mail were accessed. This makes it possible to measure the acceptance of the newsletter and to make corresponding technical and content-related adjustments for future newsletters in order to optimise needs-based use. The data is not passed on to third parties.

Data subjects can object to the processing of the data at any time by unsubscribing from the newsletter (see Subscription to our newsletter). In this case, personal data stored by BANDKE Assekuranz-Makler UG (haftungsbeschränkt) in this context will be deleted.

11. Data protection for job applications

Persons may send us applications electronically (e.g. by e-mail or via an application form provided on the website). In this case, the transmitted personal data is collected and processed for the purpose of carrying out the application procedure and thus for the potential initiation of an employment relationship. The legal basis for this is Art. 6 (1) (b) GDPR. If an employment contract is subsequently concluded with us, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with the statutory provisions. If no employment contract is concluded, the data will be deleted within two months of notification of the rejection decision, provided that no other legitimate interests of our company prevent deletion. Such a legitimate interest is, for example, a burden of proof in proceedings under the German General Equal Treatment Act (AGG).

12. Use of social plug-ins

We have integrated plug-ins from social networks on our website. If the data subject is registered with the respective social network and also logged in when accessing our website, the network recognises which specific subpage of our website the data subject is visiting. This information is collected by the operator of the social network and assigned to the data subject's account there. We have no influence on the type and scope of the data collected, stored and processed by the operator of the social network. For more information, please contact the operator of the respective social network. To prevent the operator of the respective social network from processing data about you, you must log out of the network concerned before accessing our website. You can also use special tools that block data transmission (e.g. Facebook blockers).

We have integrated the social media plug-ins of the following companies on our website:

Facebook Inc. https://de-de.facebook.com/about/privacy/
XING AG https://www.xing.com/privacy
LinkedIn Corporation https://www.linkedin.com/legal/cookie-policy

Clever Reach https://www.cleverreach.com/de/datenschutz/

13. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

a) Right to confirmation and access

You can request confirmation from us at any time as to whether personal data concerning you is being processed by us. If this is the case, you have a right of access to be informed by us of the following:

the categories of personal data being processed;

the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, the criteria for determining the storage period;

the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

the existence of a right to lodge a complaint with a supervisory authority;

all available information on the source of the data if the personal data was not collected from the data subject;

the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for the data subject.

You also have the right to be informed whether personal data is transferred to a country that is not a member of the EU (third country) or to an international organisation. In this context, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

b) Right to rectification

You have the right to request that we rectify inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request that we complete incomplete personal data — including by means of a supplementary statement.

c) Right to erasure (right to be forgotten)

You can request that we erase the personal data concerning you without delay if one of the following grounds applies:

The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

You withdraw the consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.

You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.

The personal data concerning you has been processed unlawfully.

The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.

The personal data concerning you was collected in relation to the offer of information society services pursuant to Art. 8 (1) GDPR.

If the personal data concerned has been made public by BANDKE Assekuranz-Makler UG (haftungsbeschränkt) and we are obliged to erase it in accordance with the above principles, we are also obliged to inform other controllers processing the data that you as the data subject have requested the erasure of all links to, or copies or replications of, this personal data.

Taking into account the available technology and the cost of implementation, we take reasonable measures, including technical measures, to comply with these obligations, at least insofar as the processing is not still necessary, i.e. statutory requirements prescribe it or legitimate interests prevent erasure.

d) Right to restriction of processing

You can request that we restrict the processing of the personal data concerning you under the following conditions:

You contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.

The processing is unlawful and you request the restriction of the use of the personal data instead of its erasure.

We no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims.

You have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate grounds of BANDKE Assekuranz-Makler UG (haftungsbeschränkt) override your grounds.

If the processing of the personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. In this case, we will also inform you before the restriction is lifted.

e) Right to notification

If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You can request that we inform you about these recipients.

f) Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, where the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you can request that the personal data be transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

g) Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.

In the event of an objection, BANDKE Assekuranz-Makler UG (haftungsbeschränkt) will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you may exercise your right to object by automated means using technical specifications.

h) Right to withdraw consent under data protection law

If you have given consent under data protection law, you have the right to withdraw this consent at any time with effect for the future.

i) Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing
— including profiling — which produces legal effects concerning you or similarly significantly affects you, unless the decision

is necessary for entering into, or the performance of, a contract between you and BANDKE Assekuranz-Makler UG (haftungsbeschränkt)

or

is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject

or

is based on the explicit consent of the data subject.

However, these decisions must not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and suitable measures to safeguard the rights and freedoms and legitimate interests have been taken.

If the decision is necessary for entering into or performing a contract between the data subject and the controller, or is based on the explicit consent of the data subject, BANDKE Assekuranz-Makler UG (haftungsbeschränkt) takes suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.

j) Right to lodge a complaint with a supervisory authority

Without prejudice to your rights vis-à-vis us, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform you of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.