Privacy Statement

1 Declaration of BTC AG on Data Protection

Compliance with the legal requirements for data protection and information security of the data have a high priority for BTC AG. The protection of personal data is of particular importance in every business process and in IT operations. The following explains which data are processed under which conditions by visiting our website. However, the declaration does not apply to websites of other companies that contain a link to this BTC AG website or to which our website provides a link. 
Responsible for the web presence:
BTC AG 
Communication, Marketing & Sales Services 
Escherweg 5 
26121 Oldenburg 
Phone: +49 441 3612-0 
E-Mail: marketing@btc-ag.com

2 Overview of Data Processing when Visiting the Website

If you visit our website, so-called log data are processed. Log data on the web servers are processed to ensure our system security - this includes, for example, troubleshooting on our technical systems, programming our website, danger prevention and, if necessary, the provision for prosecution by investigating authorities in the event of a criminal act on our website, for example, by a hacker attack. The log data are deleted after 7 days. Through your visit to our website, the connection establishment by your browser is logged with so-called technical factual data, which have the following contents:  
  • IP address (volatile storage)
  • Domain name (provider-dependent) / name of Internet Provider
  • Date and time of the retrieval
  • The content accessed on our website
  • Operating system and browser software used
  • If applicable, the website that has linked to our website
  • The URL from which the consent was sent by the CookieBOT
  • An anonymous, random and encrypted key from the CookieBOT
  • The status of your anonymous consent, which serves as purely technical proof of consent (from the CookieBOT)
The data processing is based on the basis of Art. 6 para. 1 lit. f Data Protection Regulation (GDPR). 

3 Security Measures

BTC uses extensive technical and organizational security measures to protect data against misuse, accidental or intentional manipulation or against access by unauthorized persons. Our security procedures are continuously improved in line with technological developments. 

4 Contacting and Registration for Events

4.1 Contact Forms

If you contact us using the contact form or register for an event, the contact details you have provided will be stored for the purpose of processing the request and for answering possible follow-up questions. While contacting us, you can decide whether and about which of our services you would like to be informed in the future.  Our range of services is principally aimed at business customers. As a rule, it is therefore business contact details that have been provided to a person by their respective employer. We reserve the right to delete contact details if we discover that this is not the case. 

The following data is collected by BTC AG when contacting us and when registering for an event according to relevance, mandatory fields are marked accordingly in the form and include:
  • Salutation
  • First name
  • Last name
  • Address
  • E-mail address
  • Phone
  • Function
  • Company
  • Business sector
  • Company size
  • Concern

The data will be processed for the purpose of handling and responding to your concern. The data deletion takes place depending on your request and the legal requirements of the GDPR – especially if you request us to do so (see passage Your Rights). The data processing is based on Art. 6 para. 1 lit. a GDPR.

4.2 GP+S Campaigns

In regular intervals, GP+S Consulting GmbH, Nehringstraße 2, 61352 Bad Homburg v.d.H. (hereinafter: "GP+S") organizes different campaigns in which e.g. webinars, live formats and whitepapers are provided. You can benefit from these events as a prospective customer or as an existing BTC customer. In return, we would like to contact you to give you the opportunity to get to know our service portfolio and our contact persons. A transfer to GP+S or the technical organizer takes place under the conditions of the organizer given for the individual event. For the tracking measures, a corresponding consent to the use of cookies and other tracking technologies is assumed and located within their own decision-making scope.

You can revoke your consent at any time by clicking on a link in the e-mails we send you and get in contact with us yourself again. The information from the forms, including the contact data you provide there, will be stored for a maximum of 180 days for the purpose of transmitting the requested information and in case of follow-up questions. Should we have aroused your interest and should you continue to remain actively in contact with us, we will only delete your contact data after the elimination of the business purpose or after the legal retention obligations.

In the case of individual events / campaigns, we may deviate from this procedure if an event-specific contact must be made by GP+S or BTC, if this is specified as a prerequisite for participation by GP+S. In such cases, you will be explicitly informed of the additional collection by GP+S and, if there is a predominant interest, you can consent to the data collection by GP+S and BTC. GP+S processes the collected data in accordance with the Privacy Policy (https://www.gps-consulting.com/de/datenschutzhinweise/).

The data processing takes place in accordance with Art. 6 para. 1, lit. a and b GDPR. You may revoke the consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

5 Newsletters

You have the option to register for the free newsletter on our website. We would like to point out that our range of services is basically aimed at existing and potential business customers and not at private individuals. Therefore, we reserve the right to prevent inclusion in the target group. For an effective registration we need a legally effective consent from you. In order to verify that the registration is actually made by the owner of the e-mail address, you will receive a confirmation e-mail in the registration process with a link that needs to be confirmed by you to complete the registration. This e-mail will list the data you have provided so that you can check it and cancel the registration if necessary.Furthermore, a link to the present privacy policy of our website is included, so that you can inform yourself again about the data protection. To prove your consent, we log the registration of the newsletter subscription, the sending of the confirmation mail and the confirmation by actively calling the link within this e-mail. In addition, we send newsletters to existing customers to inform them about our services and current topics. You have the option to revoke your consent to receive the newsletter or to object to receiving the newsletter at any time by clicking on the clearly visible link at the end of the respective newsletter or by contacting us by e-mail. The newsletter is sent by eMarketeer AB, Kista Science Tower, 164 54 Kista, Sweden. Our newsletter contains a so-called tracking pixel, which we use to automatically collect information about whether and when you have opened the newsletter and clicked on links contained therein, in order to evaluate your interest in our newsletter.

The dispatch of the newsletter and the use of the tracking pixel are generally carried out on the basis of Art. 6 Para. 1 lit. a GDPR. Sending newsletters to existing customers for direct mail takes place on the basis of § 7 Abs. 3 UWG in connection with Art. 6 Abs. 1lit.f GDPR. You have the right to object to data processing at any time for the future. The storage of the data to prove your consent takes place on the basis of Art. 6 Para. 1 lit. c GDPR.

6 Cookies, Advertising and Tracking on Our Websites

6.1 Cookies on Our Website

Our website uses cookie technology to provide you with convenient access to our information. It also gives us the opportunity to continuously optimize our website in your interest.

Cookies are small text files that are generated by a web server and stored in your web browser. In principle, you can prevent the storage of cookies by setting your browser software accordingly.
All technical measures that we use on our website for marketing and advertising purposes as well as to provide you with an optimal browsing experience are monitored via a so-called CookieBOT.
This in turn uses cookies itself to monitor and control the status of your consent to the use of appropriate techniques.
All the techniques we use are shown in detail below (CookieBOT table). The information is provided automatically by CookieBOT and documents the current status (see date information). Based on the information stored in the cookies, personal identification is not possible.

When you visit our website, third-party cookies are stored on your computer for the purposes of interest-based advertising (retargeting) and web analysis, provided you have consented to the data processing.

The setting of cookies is generally based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. You can revoke consent to the use of cookies by using the revocation link in section 19 CookieBOT (see below) and subsequently refreshing the website in the browser.

If you no longer wish to use cookies on our website, you also have the option of deleting the cookies we have set in your browser.

6.2 Microsoft Dynamics 365 Marketing Cookies in Forms

On our website, we use Microsoft Dynamics 365 Marketing forms which enable us to transfer captured data in the forms for booking events or direct contact from the website directly to our Microsoft Dynamics 365 CRM system.

When using Microsoft Dynamics 365, we only use the marketing functions (tracking, cookies, etc.) that are necessary to implement the requested services or wishes for contacting you. Beyond that, we do not use any personal information that we assign to your contact, for example to generate a usage profile of our web presence - which would be technically possible.

Furthermore, we do not use any personal information that we assign to their contact, for example, to generate a usage profile of our websites - which would be technically possible.

Domain: www.btc-ag.com
Cookie (Lifetime): 79f08280-5c63-4331-b04d-fb6f39afda51 (2 years)
Description: Long-term behavioral analysis cookie: this cookie is necessary to evaluate their interaction with our website / forms. The cookie does not contain any personal information, but uniquely identifies a specific browser for a specific computer - this is technically necessary to uniquely associate the form to a registration. Without your consent, no tracking to your person takes place. In addition, a script is implemented that prevents the use of other technically possible marketing cookies from MS Dynamics.

Domain: www.btc-ag.com
Cookie (Lifetime): 319af4c0-e197-4de9-8a9b-fe98c8a2ca04 (30 minutes)
Description: Short-term single visit cookie: this cookie expires after 30 minutes. Dynamics 365 Marketing uses it to group a visitor´s loaded pages.These items are identified as a single "visit" to the website

7 Social Media

Our website does not use social media plugins. It is merely a matter of forwarding to the corresponding websites. In doing so, no data is transmitted to Facebook, Twitter, Xing or LinkedIn etc. from our website. Once they use these websites, the provider processes the data according to the respective privacy policy and terms of use.

8 Video Use

8.1 YouTube Videos

Our website provides links to YouTube videos. If you click on them, the video starts in your browser and processes the data according to YouTube's privacy policy and terms of use. No data is transmitted from our website to YouTube. 

8.2 movingimage Videos

On our website, we use movingimage, a service provided by movingimage EVP GmbH Tempelhofer Ufer 1, 10961 Berlin (hereinafter: "movingimage"). When you call up the respective embedded video, your IP address and information about the terminal device you are using are transmitted to movinigmage's servers for optimal display and technical connection, so that the videos can be displayed on your terminal device in an optimized resolution. The information obtained in this way does not allow any conclusions to be drawn about you as a natural person. 

The legal basis for the processing is our legitimate interest in the optimized presentation of the videos according to Art. 6 para. 1 lit. f GDPR. You have the right to object to data processing at any time for the future. For further information, please refer to movingimage's privacy policy at: https://www.movingimage.com/de/agb/datenschutzerklarung-der-movingimage-evp-gmbh/.

9 Analysis of Our Website

9.1 Wiredminds

Our website uses the counting pixel technology of Wiredminds GmbH, Wiredminds GmbH, Lindenspürstrasse 32, 70176 Stuttgart (www.wiredminds.de) for statistical analysis of website usage. 
In the process, technical data is processed, from which an anonymous usage profile is created. 
No personal data about you will be stored. IP addresses are anonymized immediately after collection by deleting the last number block. You can revoke your consent to the use of this cookie by using the revocation link in section 20 CookieBOT (see below) and subsequently refreshing the website in the browser. The data processing for the use of wiredminds is carried out according to Art. 6 para. 1 lit. a GDPR.

9.2 Google Analytics

This website uses Google Analytics of Google Inc. (Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA).
Google Analytics uses cookies that enable an analysis of the use of our website. The technical data is transmitted to Google in the USA and processed. We use the analysis services anonymously (without using an advertising ID , user ID or IP address). For this purpose, we use the addition „gat._anonymizelp“. Through this addition, the IP address is shortened by Google.

Google evaluates the technical data on our behalf (agreement on data protection Article 32 GDPR) to create reports on website activity. The cookies are deleted automatically after a period of 14 months. 
You can revoke consent to the use of this cookie by using the revocation link in section 20 CookieBOT (see below) and then refreshing the website in the browser. The data processing for the use of Google Analytics is carried out according to Art. 6 para. 1 lit. a GDPR.

For more information on terms of use and data privacy, please visit http://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

10 Google Ads

We use Google Ads, an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"), which enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). We can evaluate this data quantitatively by analyzing, for example, which search terms led to the playout of our advertisements and how many ads resulted in corresponding clicks.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 (1) a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can revoke consent to the use of this cookie by using the revocation link in section 20 CookieBOT (see below) and subsequently refreshing the website in the browser.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

10.1 Use of Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and in this context conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Accordingly, Google Ireland Limited is the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws.

If you have accessed our website via a Google ad placed by us, Google will store cookies in your web browser.

These cookies have a limited validity, do not contain personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked across Ads customers' websites. The information obtained with the help of the conversion cookie is used for the purpose of creating conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. Your data may be transferred to the USA.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can revoke consent to the use of this cookie by using the revocation link in section 20 CookieBOT (see below) and subsequently refreshing the website in the browser.

You can find more information and Google's privacy policy at: https://www.google.de/policies/privacy/.

11 Google Tag Manager

Our websites use the Google Tag Manager to control a website by means of so-called website tags. They are used to dynamically control the content of our website. 
Our tracking tools are controlled via the Google Tag Manager. It organizes that the tags of Google Analytics and Wiredminds are set only depending on your respective consent in the CookieBot. 
The Tag Manager does not process or transmit any personal data to Google.

12 CookieBot

We use the CookieBot, a consent technology of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot"), to control the consent given by them anonymously for the use of tracking as well as statistics and the creation of usage information and statistics. 
If you consent to the use of the cookies we provide for the first time, the status of your consent is stored in a cookie so that you do not have to consent again if you visit our websites again. Even if you do not consent, this will be noted in the cookie.

For this purpose, among other things, your IP address (in anonymized form, the last 3 digits are set to 0), the date and time of your consent, our website URL, technical browser data, an encrypted anonymous key and the cookies you have allowed (as proof of consent) are processed.

The legal basis for the management of your consents to the processing of your personal data is Art. 6 (1) lit. c and f GDPR. Our legitimate interest lies in the legally compliant documentation and verifiability of consents, the targeting of marketing measures based on the consent granted, and the optimization of consent rates. If the data processing is based on our legitimate interest, you can object to the processing at any time with effect for the future.

You can find further information on the Internet at: https://www.cookiebot.com/de/privacy-policy/.

13 Data Transmission

BTC AG only transmits data to the following named processors and other third parties within the legal framework and in accordance with the instructions of BTC AG pursuant to Art. 28 GDPR. BTC AG is responsible for data processing in the case of commissioned processing.

In certain cases, we are generally entitled to transfer existing data to official bodies (e.g. damage defense), to fulfill legal requirements we are obliged to do so (e.g. law enforcement).

14 Existence of Automated Decision Making in Individual Cases

We do not use any automated decision-making procedures pursuant to Article 22 GDPR. We thus safeguard their right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning them or similarly significantly affects them. 
 

15 Applicant Selection Process

In the applicant selection process (recruiting), we collect, process and use personal data to process the application. This requires informed consent, which is given during the applicant process.

Einwilligung Bewerberauswahlprozess

16 Chatbot

The chatbot "Questy" is integrated on our careers page at btc-ag.com/careers. We use the "Azure Bot Services" service from Microsoft Ireland Operations Limited, One Microsoft Place, Dublin 18, Ireland. Our chatbot supports applicants with questions on the topics of training, careers and working at BTC. The chatbot only serves as an additional communication channel, its use is not required for an application at BTC .

When using the chatbot, information on the data streams, any error messages and the content of the chats are processed. These are only used to process the request as well as to improve the chatbot. Nevertheless, please avoid entering sensitive personal data in the chat. The data processing for the use of the chatbot is carried out in accordance with Art. 6 para. 1 lit. b as well as lit. f GDPR.

If the data processing is based on legitimate interests, you have the right to object to the data processing at any time for the future.

17 SAP Campaigns

At regular intervals, SAP Germany SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf, Germany (hereinafter: "SAP") organizes various campaigns in which, for example, webinars, live formats, and white papers are provided. You can benefit from these events as a prospective customer or as an existing customer of BTC. In return, we would like to contact you to give you the opportunity to get to know our service portfolio and our contact persons. As a rule, no information is passed on to SAP or the technical organizer (see below). When using the campaign infrastructure provided by SAP and its service provider (Evalanche / sc-networks.de), in which we participate as an SAP partner, no tracking measures are used. You can revoke your consent at any time by clicking on a link in the e-mails we send you and resuming contact with us yourself. The information from the forms, including the contact data you provide there, will be stored for a maximum of 180 days for the purpose of transmitting the requested information and in case of follow-up questions. Should we have aroused your interest and should you continue to remain actively in contact with us, we will only delete your contact data after the business purpose has ceased to exist or after statutory retention obligations have ceased to apply.

For individual events / campaigns, this procedure may be deviated from if an event-specific contact must be made by SAP or BTC, if this is specified as a prerequisite for participation on the part of SAP. In such cases, you will be explicitly informed of the additional collection of data by SAP and, if you are interested, you will consent to the collection of data by SAP and BTC. SAP processes the collected data in accordance with the privacy policy: https://www.sap.com/corporate/de/legal/privacy.html.

The data processing is carried out in accordance with Art. 6 para. 1, lit. a and b GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. 

18 Your Rights

When processing personal data, the GDPR grants you as a website user the following rights:

Right of access (Art. 15 GDPR): 
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to be informed about this personal data and to receive the information listed in detail in Art. 15 GDPR.

Right to rectification and deletion (Art. 16 and 17 GDPR): 
You have the right to request without undue delay the rectification of any inaccurate personal data / information concerning you and, where applicable, the completion of any incomplete personal data / information. You also have the right to request that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in Art. 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued.

Right to restriction of processing (Art. 18 GDPR): 
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of any review.

Right to data portability (Art. 20 GDPR):
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

Right of objection (Art. 21 GDPR): 
If data is collected on the basis of Art. 6 (1) p. 1 lit. f (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

Right of withdrawal (Art. 7 GDPR): 
You have the right to revoke your consent to data processing on our website at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You were informed of this before giving your consent by the link to this privacy policy.

Right of complaint to a supervisory authority (Art. 77 GDPR) 
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection law. The right of complaint may be asserted in particular before a supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement. The supervisory authority for data protection in Lower Saxony (State Commissioner for Data Protection of Lower Saxony) is responsible. 
You also have the right to contact the data protection officer of BTC AG directly in this regard.

19 Company Data Protection Officer:

BTC AG
Data protection officer 
Escherweg 5
26121 Oldenburg
Phone: +49 441 3612-0
Fax: +49 441 3612-3999
E-Mail: datenschutz@btc-ag.com

 

20 Information on the use of CookieBot

If you do not see anything at this point, it is usually due to browser settings in your organisation. Please get in touch with your internal contacts. Pressing the F5 key often helps.