Privacy Policy
Privacy Policy
Our website data protection information is structured as follows:
The simultaneous use of male and female forms of speech is dispensed with for reasons of better legibility. All personal names apply to all genders.
A. Responsible Person
The responsible for the processing of personal data is:
bmp greengas GmbH
Ganghoferstraße 68a
80339 Munich, Germany
Telefon: +49 (0)89 309 05 87-0
Telefax: +49 (0)89 309 05 87-888
E-Mail: info@bmp-greengas.de
You can contact our data protection officer at:
Andreas Fitz
bmp greengas GmbH
Ganghoferstraße 68a
80339 Munich, Germany
datenschutz@bmp-greengas.de
B. Processing of personal data
Read here how personal data are collected and for what purposes they are processed, with what legal basis, to whom the data are passed on, for what purpose and under what conditions they are deleted again.
1. Technical and functional provision of the website.
We process personal data in order to be able to provide our website with as little technical or functional restrictions as possible and in accordance with legal requirements.
a. Logs
When you visit our website, we save certain access data, e.g. browser type and version, operating system used, the previously visited website, access date and time of the server request and the file request of the client (file name and URL). We use this data anonymously for statistical evaluations without assignment to the respective user.
The purpose of this data processing is the availability and correct presentation of the website on your device as well as the optimization of our website. In this respect, there is a legitimate interest on our part. Processing is based on Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR and Article 15 of the German Telemedia Act.
b. Consent Management Tool
Our website uses the Consent Management Tool (“CMT”) Borlabs Cookie to obtain and document your consent to data processing by various services.
When you open our website, you can use the CMT to submit declarations of consent for individual data processing that is stored by the CMT. For this purpose, the CMT places cookies, i.e. small text files, on your computer.
These are the following cookies:
- Name: Borlabs Cookie Provider: Borlabs – Benjamin A. Bornschein Purpose: Stores the settings of the visitors selected in the Borlabs Cookie box. Cookie name: borlabs-cookie Cookie duration: 1 year
2. Establishing contact
We collect personal data when you provide it to us. This can be e.g. data that you enter in a contact form or transmit to us in the course of contacting us. Insofar as certain input fields are marked as “mandatory information”, we use these fields to collect the data required to carry out the desired measure. Of course, you can provide us with further data if you wish.
The processing of this data takes place on the basis of Art. 6 Para. 1 S. 1 lit. b GDPR, if this is necessary to carry out a measure requested by you. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries sent to us (Art. 6 Para. 1 S. 1 lit.f GDPR).
3. Promotional activities; especially email newsletters
We can use your data for advertising purposes. We have a legitimate interest in using your data for direct marketing purposes within the meaning of Art. 6 Para. 1 S. 1 lit.f GDPR.
If you have consented to this (Art. 6 Para. 1 S. 1 lit. a GDPR), we will also use your data to send you an email newsletter. The newsletter is technically designed so that we can understand whether you have opened it. The information obtained is used to make the newsletter even more attractive for you in the future.
You can revoke your consent to the sending of the newsletter at any time via the “unsubscribe” link in every email newsletter or by sending a message to the contact details given above. In addition, you can object to the processing of your personal data for advertising purposes with immediate effect for the future in writing, by fax, by email or by telephone without incurring any costs other than the transmission costs according to the basic tariffs. This does not affect the legality of the data processing operations that have already taken place.
The newsletter is sent by a service provider who is bound by instructions and is obliged to comply with data protection regulations and is not allowed to use the data for any other purpose.
4. Further processing of personal data on our website
a. Google services
If you have given your consent, this website uses services provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).
aa. General information on Google services, legal basis
In order to be able to provide the services, Google processes personal data. The legal basis for data processing by Google services is your consent, Art. 6 Para. 1 S. 1 lit. a GDPR.
It cannot be ruled out that information collected by Google services may also be transmitted to a Google server in a third country, in particular to a server belonging to Google’s parent company, Google LLC, based in 1600 Amphitheater Parkway, Mountain View, California, USA stored there. We have agreed standard data protection clauses with Google to secure the transfer to third countries. Google ensures compliance with data protection agreements. At the same time, the transmission of personal data to the USA is associated with particular risks for data subjects. The integration of and data processing by Google services therefore only takes place with your express consent. You can find more information on third country transfers in section 6.
If you are logged into your Google account, Google can add processed information to your account depending on your account settings and treat it as personal data, see in particular https://www.google.de/policies/privacy/partners/. We have no knowledge of the data collected in this way and how it is used.
Further information on data processing by Google can be found at:
- https://policies.google.com/privacy (“Google Privacy Policy”)
- https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use our partners’ websites or apps”)
- http://www.google.com/policies/technologies/ads (“use of data for advertising purposes”)
bb. Google Analytics
This website uses the Google Analytics service. Using cookies, i.e. small text files that are stored on your computer, this service carries out a cross-website analysis of your surfing behavior.
These are the following cookies:
- Name: Google Analytics
Provider: Google
Purpose: Google cookie for website analysis. Generates statistical data on how the visitor uses the website.
Cookie name: _ga, _gat, _gid
Cookie duration: 2 years
On our behalf, Google processes the data collected in order to provide us with pseudonymous profiles of individual visitors and general statistics on the use of our website. We use this information to improve our offer and to make it more interesting for you as a user.
In addition, this website uses the “demographic characteristics” function of Google Analytics. By evaluating your surfing behavior, Google can make statistical statements on the demographic characteristics and interests (e.g. age, gender, affinity categories, segments with ready-to-buy target groups) of the visitors to our website. However, we cannot assign this data to any specific person. We use the demographic information to improve our offer and to make it more interesting for you as a user. You can find further information on data processing using “demographic characteristics” from Google Analytics at: https://support.google.com/analytics/answer/2799357?hl=de.
The IP anonymization has been activated on this website so that your IP address is shortened by Google Analytics before it is saved. According to Google, the full IP address is only transmitted to a Google LLC server in the USA and shortened there in exceptional cases. According to Google, the shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
At the following link you can download and install a plug-in for the cross-website deactivation of Google Analytics for the browser you are using: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on data processing by Google Analytics can be found at: https://support.google.com/analytics/answer/6004245?hl=de%20.
cc. Google Ads
This website uses Google Ads to draw attention to our offers in Google search results and on third-party websites.
We have a legitimate interest in drawing attention to our offers. The relevant legal basis for the use of this service and the associated data processing is therefore Art. 6 Para. 1 S. 1 lit.f GDPR.
We only want to place attractive advertisements for you. For this purpose, Google matches the keywords you are looking for with the tags we have specified on our website and analyzes your surfing behavior on our website. For this so-called “remarketing measure”, Google places cookies on your terminal device.
If you click on an advertisement placed for us by Google in the Google search results or on the website of a third party, cookies for so-called conversion tracking (visit action analysis) are stored on your device. These cookies are only valid for a limited period of time. If you then visit certain pages on our website and the cookies have not yet expired, Google can recognize that you clicked on our ad and were redirected to our website. In this way, Google can provide us with a statistical evaluation of the effectiveness of our advertising measures.
You can activate or deactivate personalized advertising from Google via the settings for advertising under this link: https://adssettings.google.com/anonymous?sig=ACi0TCjoT_RnPbIUe8IGa85dyA_5J4bol6TV5SM7jVOJycoeZaGP6BA8RWwSWmRUP0XhlKEX4nczIzV15.
These settings are saved in your Google Account (if you are signed in) or in your browser (if you are not signed in). Alternatively, you have the option of installing a plug-in for your browser under this link in order to deactivate personalized advertising: https://support.google.com/ads/answer/7395996?hl=de
For more information on how Google Ads works and how it processes data, see:
dd. Google Maps
This website uses Google Maps to visually display geographic information and to create directions.
The embedding of Google Maps is linked to your settings in our Consent Management Tool. This means that you will initially only see a preview image on our website without establishing a connection to Google. A connection to Google will only be established after you have activated the map function in the settings by ticking the box. This will forward your IP address to the Google server and thus inform Google that our website has been visited with your IP address. In addition, according to its own information, Google can use cookies, i.e. small text files that are stored on your computer, to collect data on your user behavior.
These are the following cookies:
- Name: Google Maps
Provider: Google
Purpose: used to unblock Google Maps content.
Host: google.com
Cookie name: NID
Cookie duration: 6 months
You also have the option of deactivating the Google Maps service and thus preventing data transfer to Google by deactivating JavaScript in your browser settings. However, we would like to point out that in this case you will not be able to use the map display.
Further information on Google Maps can be found at: https://www.google.com/intl/de_de/help/terms_maps.html (Terms of use for Google Maps).
ee. Google reCAPTCHA
This website uses the Google reCAPTCHA service.
The legal basis for the use of this service and the associated data processing is your consent, Art. 6 Para. 1 S. 1 lit. a GDPR.
The purpose of reCAPTCHA is to check whether the data entry on our website is made by a person or improperly by an automated program. reCAPTCHA is used to ensure data security when transmitting data that is collected via Contact or other forms and thus to protect against spam.
You have the option of deactivating Google reCAPTCHA and thus preventing data transfer to Google by deactivating JavaScript in your browser. However, we would like to point out that in this case you may not be able to use all of the services on our website.
Further information on Google reCAPTCHA can be found at:
ff. YouTube
We have integrated videos from the Google service YouTube so that you can view them on our website.
The embedding of YouTube is linked to your settings in our Consent Management Tool. This means that you will initially only see a preview image on our website without establishing a connection to Google. A connection to Google will only be established after you have activated the playback of videos in the settings by dragging the slider. This will forward your IP address to the Google server and thus inform Google that our website has been visited with your IP address. In addition, according to its own information, Google can use cookies, i.e. small text files that are stored on your computer, to collect data on your user behavior.
These are the following cookies:
- Name: YouTube
Provider: YouTube
Purpose: used to unblock YouTube content.
Host (s): google.com
Cookie name: NID
Cookie duration: 6 months
You also have the option of preventing the integration of YouTube videos and thus data transfer to Google by deactivating JavaScript in your browser settings. However, we would like to point out that in this case you will not be able to use the video function.
You can find more information about YouTube at: https://www.youtube.com/t/terms (YouTube Terms of Use).
gg. Facebook Pixel
If you have given your consent, our website uses the Facebook Pixel function of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
We can place ads on Facebook to draw attention to our offers. You should only see our advertisements on Facebook if they are of interest to you. In order to determine whether an ad might be of interest to you, Facebook Pixel analyzes your surfing behavior on our website.
If we place an ad for you on Facebook and you click on it, you can be redirected to our website. In this case, Facebook can use the pixel to understand that you clicked on our ad and were redirected to our website. In this way, Facebook can provide us with a statistical evaluation of the effectiveness of our advertising measures (so-called “conversion tracking”).
If you are logged into Facebook with your profile, Facebook can add the data collected to your user profile. In addition, Facebook can use the data collected for its own advertising purposes in accordance with the Facebook data usage guidelines.
It cannot be ruled out that data collected by Facebook may also be transmitted to a Facebook server in a third country, in particular to a server belonging to Facebook’s parent company, Facebook Inc., based in 1601 Willow Road Menlo Park, CA 94025, USA stored there. We have agreed standard data protection clauses with Facebook to secure the transfer to third countries. Facebook ensures compliance with data protection agreements. At the same time, the transmission of personal data to the USA is associated with particular risks for data subjects. The integration of and data processing by Facebook Pixel therefore only takes place with your express consent. You can find more information on third country transfers in section 6.
The relevant legal basis for data processing by Facebook is your consent, Art. 6 Para. 1 S. 1 lit. a GDPR.
Users logged in to Facebook can adjust their settings for advertisements at: www.facebook.com/ads/preferences.
Further information on data processing by Facebook as well as your related rights and setting options to protect your privacy can be found at: de-de.facebook.com/about/privacy/.
hh. LinkedIn Marketing Solutions
If you have given your consent, our website uses various functions of LinkedIn Marketing Solutions, which are provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
We can place advertisements on LinkedIn to draw attention to our offers. You should only see our advertisements on LinkedIn if they are of interest to you. In order to determine whether an advertisement could be of interest to you, LinkedIn analyzes your surfing behavior on our website.
If we place an ad for you on LinkedIn and you click on it, you can be redirected to our website. In this case, LinkedIn can understand that you clicked on our ad and were redirected to our website. In this way, LinkedIn can provide us with a statistical analysis of the effectiveness of our advertising measures on our behalf (so-called “conversion tracking”). Conversion tracking takes place using the so-called “LinkedIn Insight Tag”. These are some lines of code provided by LinkedIn that we have integrated into our website.
If you are logged in to LinkedIn with your profile, LinkedIn can add the collected data to your user profile.
It cannot be ruled out that data collected by LinkedIn may also be transmitted to a LinkedIn server in a third country, in particular to a server belonging to LinkedIn’s parent company, the LinkedIn Corporation, based in 2029 Stierlin Court Mountain View, California 94043, USA, and stored there. We have agreed standard data protection clauses with LinkedIn to secure the transfer to third countries. LinkedIn ensures compliance with data protection agreements. At the same time, the transmission of personal data to the USA is associated with particular risks for data subjects. The integration of and data processing by LinkedIn Marketing Solutions therefore only takes place with your express consent. You can find more information on third country transfers in section 6.
The relevant legal basis for data processing by LinkedIn is your consent, Art. 6 Para. 1 S. 1 lit.
If you are logged in to LinkedIn, you can deactivate the data collection at any time under this link: https://www.linkedin.com/psettings/enhanced-advertising. You can also object to the analysis of your usage behavior by LinkedIn and the placing of individualized advertisements under this link (“opt-out”): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Further information on data processing by LinkedIn as well as your related rights and setting options to protect your privacy can be found at: https://www.linkedin.com/legal/privacy-policy.
3. Transfer of data to third parties
Your personal data will only be passed on to third parties if this is necessary for the purpose of processing the contract (Art. 6 Para. 1 S. 1 lit.b GDPR), and you have expressly consented to the transfer (Art. 6 Para. 1 S. 1 lit. a GDPR) or data protection law permits such. However, only the data required in each case will be passed on.
In addition to the above-mentioned service providers, there are the following categories of service providers who are bound by instructions and are obliged to comply with data protection regulations and are not allowed to use the data for any other purpose: Service providers for the support and hosting of the website.
4. Third country transfers
Our website includes services from companies based in the USA or relationships in the USA. If you consent to data processing by one of these service providers, it cannot be ruled out that US authorities will have unrestricted access to the data processed about you. You have no legal recourse against this. Specifically, it is about these service providers:
- Service: All of the above Google services
Provider: Google Ireland Limited, Dublin / Ireland
Parent company: Google LLC, Mountain View / USA - Service: Facebook Pixel
Provider: Facebook Ireland Limited, Dublin / Ireland
Parent company: Facebook Inc., Menlo Park / USA - Service: LinkedIn Marketing Solutions
Provider: LinkedIn Ireland Unlimited Co., Dublin / Ireland
Parent company: LinkedIn Corporation, Mountain View / USA
It cannot be ruled out that the companies or the respective parent companies and / or US authorities may gain access to personal data that is processed to provide the services.
So far, this transfer of personal data to the USA could be justified because the companies or the parent companies of the companies were certified according to the EU-US Privacy Shield, which was declared invalid by the European Court of Justice in July 2020. A transmission on the basis of the so-called standard data protection clauses according to Art. 46 Para. 2 lit. c GDPR is not possible because the high standards of the ECJ (The Court of Justice of the European Union) and the data protection supervisory authorities for additional agreements with companies in the USA cannot (yet) be met. Negotiations are in progress between the USA and the EU on a follow-up agreement to the Privacy Shield. However, when these will be completed is not foreseeable.
We therefore only use the mentioned services with your express prior consent and expressly point out the following about the risks of data transmission to one of the above-mentioned service providers:
Due to the powers of the US secret services and the legal situation in the USA, the state surveillance measures in the USA are disproportionate and, from the EU’s point of view, there is no adequate state level of data protection for personal data. In particular, Sec. 702 of the US-American Foreign Intelligence Surveillance Act (FISA) does not provide any restrictions on the surveillance measures of the secret services and no guarantees for non-US citizens. In addition, the Presidential Policy Directive 28 (PPD-28) does not give those affected any effective legal remedies against measures by the US authorities and does not provide for any barriers to ensuring proportionate measures. In addition, on the basis of the US Cloud Act, US authorities can demand that a US company surrender all stored data, even if this data is on servers within the EU.
5. Erasure of data
The personal data processed by us will be stored by us for as long as this is necessary for the respective purpose – in particular the processing of your request or your order – in compliance with the statutory retention periods (e.g. ten years for tax-relevant documents or tax regulations in accordance with the German Commercial Code and Fiscal Code, six years for other business letters) (Art. 6 Para. 1 S. 1 lit. c GDPR). Storage beyond the statutory retention periods is possible if you have consented to this in accordance with Article 6 Paragraph 1 S. 1 lit. a GDPR or the purpose of the data processing has not yet ceased.
C. Your Rights
1. Deactivating cookies
Some of the processing operations explained above use cookies. Most browsers accept cookies automatically. If you do not wish this, you can deactivate the storage of cookies on your hard drive in your browser settings. You can also delete cookies that have been saved in your browser settings at any time. However, in this case you may not be able to use all functions of our website to their full extent.
2. Right of withdrawal
Some of the processing operations explained above only take place with your consent. You can revoke your consent to these processing operations at any time with immediate effect for the future. In this case, you may no longer be able to use our services as usual until you have again consented to the respective data processing. You can exercise your right of withdrawal via our CMT Borlabs cookie. In this way, you can also consent to individual data processing operations again. Click here to change your settings or withdraw your consent.
3. Right to Object
You can object to the use of personal data for direct marketing purposes at any time; You can also object to the use of personal data on the basis of Art. 6 Paragraph 1 lit. e or f GDPR for reasons arising from your particular situation at any time with effect for the future without incurring any costs other than the transmission costs the basic tariffs arise.
4. Right to information, correction, deletion or restriction and transferability
Under the conditions of Art. 15 to 20 GDPR, you have the right to receive information free of charge about the data we have stored about you, to have incorrect data corrected and to request the deletion or restriction of processing as well as the transferability of your personal data. In some cases, however, we are not allowed to completely delete user data due to statutory retention requirements.
5. Right to complain
You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is the State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany.