Data protection declaration

Each citizen has the right ensured by constitutional law to determine the utilization of his personal data himself. For this reason it is our duty to protect your data which you entrust us by visiting our internet presentation. Subsequently we would like to demonstrate you which of your data we record, what happens with these data and which kind of safety precautions we have made to protect these data against abuse.

1. General instructions and compulsory information

a. Name and address of the person responsible for data
Bernhard Glück Kies-Sand-Hartsteinsplitt GmbH
Ohmstraße 16 85254 Sulzemoos Telephone: +49 8135 937-100
E-Mail: Datenschutz@Freistaat-IT.de

b. Data protection officer
The above mentioned companies have appointed a data protection officer. The contact data are as follows:
Peter Haack Consulting
Peter Haack
Telefon: +49 9090 5749120
E-Mail: dsb@datenschutz-hm.de

2. Purpose of processing

The data collected on this website are applied to process the requests and to dispatch the newsletter. The data collected by the web analysis tool and logging system are processed in an anonymised way und used to improve the web presence.

3. Legal basis of processing

Pursuant to article 13 Data Protection Act Regulation we inform you about the legal foundations of our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: the legal basis for obtaining consents is article 6 section 1 lit. a and article 7 DSGVO (Data Protection Act Regulation), the legal basis for processing to fulfil our performances and implementation of contractual measures as well as replying requests is article 6 section 1 lit. b DSGVO (Data Protection Act Regulation), the legal basis for the processing to fulfil our legal obligations is article 6 section 1 lit. c DSGVO (Data Protection Act Regulation) and the legal basis for the processing to safeguard our justified interests is article 6 section 1 lit. f DSGVO (Data Protection Act Regulation). For the case that vital interests of the person concerned or another natural person require processing personal data, article 6 section 1 lit. d DSGVO (Data Protection Act Regulation) serves as legal basis.

4. Forms

If you send us requests or orders using a form (request form, vehicle search, desired vehicle, club card order, catalogue order, contact form), your information from the form including the contact data given by you will be saved in our company for the purpose of processing the request and for the case of follow-up questions. We will not transmit these data without your approval.
Thus, the processing of the data entered in the form is exclusively carried out after receiving your consent (article 6 section 1 lit. a DSGVO (Data Protection Act Regulation)). You can withdraw this consent at any time. An informal notification is sufficient sent by e-mail to Datenschutz@Freistaat-IT.de. The legality of the data processing processes carried out until withdrawal remains unaffected from withdrawal.
The data entered in the form remain in our company until you request us to delete them, revoke your approval for storage or the purpose for data storage is omitted (e.g. after completed processing of your request). Mandatory statutory provisions remain unaffected – in particular retention periods.

5. Recording

For each access of a user on a site of our web offer and retrieval of a file access data will be saved through this process in a protocol file on our server.

• IP-address • site from which the file was requested • date, time • browser type and browser settings • operating system • the site visited by you • data volume transferred • access status (file transferred, file was not found etc.)

From these data statistics are generated which help us to adapt our internet portal to your requirements. Any references to persons cannot be derived.

6. Newsletter

On the websites of the Bernhard Glück Kies-Sand-Hartsteinsplitt GmbH (www.glueck- freizeitmarkt.de and www.derfreistaat.de) the users are given the opportunity to subscribe the newsletter of our corporate group. The personal data which are transmitted to the person responsible for the processing when ordering the newsletter result from the applied input screen.

The corporate group informs its customers and business partners in regular intervals by means of a newsletter submitting offers made by the company. The newsletter of our company can only be received by the person concerned if (1) the person concerned has a valid e-mail address and (2) the person concerned is registered for the newsletter dispatch. For legal reasons a confirmation mail in double-opt-in-procedure is sent to the e-mail address entered for the newsletter dispatch for the first time by a person concerned. This confirmation mail serves as verification if the owner of the e-mail address has authorized the receipt of the newsletter as person concerned.

In addition to this, for the subscription of the newsletter we save the IP-address assigned by the internet service provider (ISP) of the computer system applied by the person concerned at the time of registration as well as the date and time of registration. Collecting these data is necessary in order to comprehend the (potential) abuse of an e-mail address of a person concerned at a later time and thus serves as legal protection of the person responsible for the processing.

The personal data collected within the context of a subscription of a newsletter are exclusively applied to dispatch our newsletter. In addition to this, the subscribers of the newsletter could be informed by e-mail if this is required for the operation of the newsletter service or a corresponding registration, as this could apply in the case of changes of the newsletter offer or the modification of technical conditions. The personal data collected within the context of the newsletter service will not be transferred to third parties. The subscription of our newsletter can be cancelled by the person concerned at any time. The approval for personal data storage which the person concerned has given us for the newsletter dispatch can be revoked at any time. For the purpose of revocation of approval each newspaper contains a corresponding link. Moreover there is the opportunity to directly unsubscribe from the newsletter dispatch on the website of the person responsible for the processing or to inform the person responsible for the processing in another way.

7. Youtube

The person responsible for the processing has integrated components of You Tube on this website. You Tube is an internet video portal, which facilitates video publishers cost-free integration of video clips and other users cost-free viewing, evaluating and commenting them. YouTube allows the publication of all types of videos, so that not only complete film and television productions but also music videos, trailers or videos produced by users themselves can be retrieved by the internet portal.

The operating company of is the Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

By means of each retrieval of one if the individual sites of this website, which is operated by the person responsible for the processing and on which a You Tube component (YouTube-Video) has been integrated, the internet browser on the information technological system of the person concerned is automatically caused by the respective You Tube component to download a description of the corresponding You Tube component from You Tube. Further information concerning You Tube can be downloaded under https://www.youtube.com/yt/about/de/. Within the context of this technical procedure YouTube and Google receive information which specific subpage of our website is visited by the person concerned.

If the person concerned is simultaneously logged in at You Tube, You Tube recognizes due to the retrieval of subpage which contains a You Tube video, which specific subpage of our website is visited by the person concerned. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.

YouTube and Google receive information through the YouTube component that the person concerned has visited our website if the person concerned is simultaneously logged in at You Tube at the time of retrieval or our website; this occurs regardless whether the person concerned clicks on a You Tube video or not. If such a transmission of information to You Tube and Google is not intended by the person concerned, he can prevent this transmission by logging out from his You Tube account before retrieving our website. The data protection regulations published by YouTube, which are retrievable under https://www.google.de/intl/de/policies/privacy/, provide insight into collecting, processing and using personal data by YouTube and Google.

8. Rights of the individuals affected

You have the right: • compliant to article 15 DSGVO (Data Protection Act Regulation) to be informed about the personal data processed by us. They can particularly request information about the processing purposes, the category of personal data, the categories of recipients towards those their data were or are revealed, the planned storage duration, the existence of right to correction, cancellation, limitation of processing or contradiction, the existence of a right to appeal, the origin of their data, if they were not collected in our company, as well as the existence of an automated decision making including profiling and, if necessary, relevant information with regard to their details;

• compliant to article 16 DSGVO (Data Protection Act Regulation) to immediately request the correction of incorrect data or the completion of their personal data stored in our company;

• compliant to article 17 DSGVO (Data Protection Act Regulation) to request the deletion of their personal data stored in our company unless the processing is required to exercise the right of free expression and information, to fulfill a legal obligation for reasons of public interest or to assert, exercise or defend legal claims;

• compliant to article 18 DSGVO (Data Protection Act Regulation) to request the restriction of processing of your personal data if the correctness of data is denied by you, the processing is illegal, however, you reject their deletion and we do not require the data anymore, but you require them to assert, exercise or defend legal claims or you have filed an objection against the processing according to article 21 DSGVO (Data Protection Act Regulation);

• compliant to article 20 DSGVO (Data Protection Act Regulation) to obtain your personal data, which you have provided us, in a structured, usual and machine-readable format or to request the transmission to another person responsible:

• compliant to article 7 section 3 DSGVO (Data Protection Act Regulation) to revoke your approval given once towards us at any time. This implies that we are not allowed to continue the data processing based on this approval for the future anymore.

9. Right to appeal at the supervisory authority

You have the right to file a complaint at a data protection authority. For this you can address a data protection authority which is competent for your place of residence or federal state or the data protection authority which is competent for us. This is: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, D-91522 Ansbach, poststelle@lda.bayern.de.

10. Right of appeal

If your personal data are processed on the basis of justified interests according to article 6 section 1 p. 1 lit. DSGVO (Data Protection Act Regulation), you have the right in accordance with article 21 DSGVO (Data Protection Act Regulation) to appeal against the processing of your personal data if there are any reasons for this, which result from your special situation or if the appeal is directed towards direct advertising. In the latter case you have a general right of appeal which shall be implemented by us without mentioning a special situation.

If you want to make use of your right of revocation or appeal, an e-mail to Datenschutz@Freistaat-IT.de. shall be sufficient. 11. Cookies

On our website we apply session cookies. The data are not permanently stored. The application of time-limited cookies provides you the advantage that you do not have to enter your personal data again and again when filling in various forms in our web offer: the cookies are automatically deleted when closing the browser.

A cookie designates information which a web server sends to a browser which the browser again sends back in case of accesses to this web browser. By means of cookies the stateless hypertext transfer protocol is extended by the option to store information between the retrievals. You can make a difference between persistent cookies and session cookies. The first ones are permanently stored (for example, on the hard disk); whereas the latter are only stored for the duration of a session.

Most of the browsers are set in such a way that they automatically accept cookies. However, you can deactivate the storage of cookies or set your browser in such a way that it notifies you as soon as the cookies are sent.