Data Protection Policy

1. Controller and data protection officer

We,

BECKER-Antriebe GmbH
Friedrich-Ebert-Straße 2-4
35764 Sinn
Germany
Telephone: +49 (0) 2772/507-0
Email: info@becker-antriebe.com
Website: https://www.becker-antriebe.com/home.html

(hereinafter “Becker-Antriebe”, “we” or “us”),
are the controller in accordance with Article 4 Para 7 EU General Data Protection Regulation and are legally obliged to inform you about the purpose, scope, type of collection and use of your personal data. If you have any questions regarding this policy or the handling of personal data at our company, please contact our external data protection officer at datenschutz@becker-antriebe.com or by post to RPA Datenschutz & Compliance GmbH, Hauser Gasse 19 b, 35578 Wetzlar with the addition “Data protection officer”. We would like to point out that data transmission on the internet (e.g. communication by unencrypted email) may involve gaps in security. Complete protection against data being accessed by third parties is therefore not possible.

2. Processing your personal data and the type and purpose of use:

Personal data is individual details about the personal and factual circumstances of a certain or identifiable natural person, meaning all data that can be related to you personally.

a) Principles

The Becker-Antriebe Smart Home solution and any devices linked to it (e.g. CentralControl CC51) have functions that provide you with more comfort in your home. To execute the contract, in other words, to provide related services (e.g. functionalities of the app, control of the Smart Home device), it is unavoidable that we collect data that can be related to you or another natural person. Some of the data we process is not personal data. With regard to this information, we have neither an interest in identifying a natural person, nor do we have the necessary knowledge or the legally permissible means to establish a personal reference. We may use such non-personal data to improve our products. We only collect, process and use personal data if we have a legal basis for this or if you have given us your consent in this regard, e.g. as part of a registration. Several legal bases may be relevant at the same time and allow the processing of personal data. Your data is generally processed in Germany and Europe. If, in exceptional cases, your data is also processed in countries outside the European Union (in so-called “third countries”), this will be done if you have expressly consented to this or if it is necessary for us to provide our service to you or it is provided for by law (Article 49 GDPR). Furthermore, your data will only be processed in third countries if certain measures ensure that an appropriate level of data protection exists (e.g. EU Commission adequacy decision or so-called “guarantees”, Article. 44 et seq. GDPR).

b) Data processing when using the Becker-Antriebe Smart Home service

Contract information

If you want to use our Becker-Antriebe Gateway Server for remote access, we require your personal data to store you in our system as a user. Furthermore, we need your personal data for establishing, executing and terminating the existing contractual relationship with you. This is notably the first and surname, email address, chosen language and user name. Although you are also obliged to provide a password, this will not be transmitted to us in plain text; we only save the hash value of the password. This information is required for the fulfilment of a contract in accordance with Article 6 Para. 1 lit. b) GDPR and is stored on our servers until the end of the contract. Contractual or legal retention periods remain unaffected by this. If you do not use our Smart Home services for more than five years, we will delete your personal data. Contractual or legal retention periods remain unaffected by this.

User-related and technical information

This concerns information that may enable personal reference under certain circumstances. This is required for the purpose of enabling the operation and use of the Becker-Antriebe Home Systems (esp. Smart Home device and Becker Gateway Server). In concrete terms, this is:

device serial number
technical information for calibration and to provide current time and updates of your system via our servers
system data, e.g. connected devices and accessories, serial numbers, Smart Home Controller specifications, software versions of the individual components, Smart Home system data

This information is required for the fulfilment of a contract in accordance with Article 6 Para. 1 lit. b) GDPR and is stored on our servers until the end of the contract. Contractual or legal retention periods remain unaffected by this. If you do not use our Smart Home services for more than five years, we will delete your personal data. Contractual or legal retention periods remain unaffected by this.

Log files:

When you use the service and related services, certain information is stored in log files on your Smart Home device or on our systems. The following data is collected without your intervention and stored until it is automatically deleted:

IP address of the enquiring computer
data and time of access,
name and URL of the accessed file,
amount of data transferred
successful retrieval message
information about the correctness of the cryptographic key used

The log files can be used by us to ensure the operation, identification and rectification of faults as well as for security reasons (e.g. to clarify and track attack attempts). Data is stored in log files to ensure the functionality of the Smart Home system. The data also helps us to further develop convenient user interfaces and to ensure the security of our information technology systems. The aforementioned data processing is based on Article 6 Para. 1 Sentence 1 Lit. f GDPR. In accordance with Article 6 Para. 1 Sentence 1 Lit. f GDPR, processing data for the protection of legitimate interests is permitted unless the interests, fundamental rights or freedoms of data subjects requiring the protection of personal data prevail. Our legitimate interest comes from the aforementioned purposes. Under no circumstances do we use the data collected for the purpose of drawing conclusions about people that visit our website. The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. In the case of data being stored in log files, this is the case after 30 days at the latest. The collection of the data for website provision and data storage in log files is necessary for operating the Smart Home app. There is therefore no possibility for the user to object. Your data is generally not transmitted to third parties by us. Furthermore, we take appropriate measures and carry out regular checks to ensure that the data we collect cannot be viewed or accessed by third parties from outside.

Determining faults

If your Smart Home device malfunctions and you explicitly want help from our customer support, it is possible for us to connect to your Smart Home device to correct the malfunction. Our customer support will explicitly inform you as soon as your Smart Home device is accessed and will also inform you when access to your Smart Home device is terminated. This is only done with your express consent in accordance with Article 6 Para. 1 Lit. a), which serves as the legal basis in this respect.

Disclosing data to other controllers

a) General

We will only transfer your personal data to other persons responsible if this is necessary to fulfil the contract or to execute precontractual measures or if you have given your consent. You will find details on the legal bases in the point below. Furthermore, data may be transferred to other controllers if we are required to do so by law or by an enforceable official or court order.

b) Use of service providers

We commission external service providers with software development, website programming and data hosting tasks. We have concluded a contract with our service providers, that process data on our behalf, for contract processing in accordance with Article 28 GDPR and have implemented the strict requirements of the GDPR and the German data protection authorities. External service providers that are not contract processors in the sense of Article 28 GDPR are bound to confidentiality and compliance with the legal requirements by us.

c) Integration of Amazon Alexa

You have the option of controlling your Becker-Antriebe Smart Home products with voice commands using Amazon Alexa. To do so, you have to connect the Smart Home products with Amazon Alexa. If you control your Smart Home product via Alexa, it is necessary that personal data is passed on via Amazon to your Smart Home product or from your Smart Home product to Amazon for output via Amazon Alexa. If you send voice commands to Amazon Alexa to control Smart Home products or to retrieve information from your Smart Home product, then data (in particular data from your Smart Home product and voice data) will be transferred to our servers and processed and subsequently the necessary data will be passed on to Amazon and used by Amazon to provide the service. This data may be personal. By connecting your Amazon Alexa and Becker-Antriebe accounts and activating Skills, you make it clear that the Smart Home product you have installed can be accessed via Amazon Alexa and information about Amazon Alexa can be issued and you instruct us to exchange data with Amazon Alexa in this context. You or Amazon are responsible for the associated data processing by Amazon. The data processing carried out by Amazon is subject to Amazon’s terms of use and data privacy provisions. Becker-Antriebe has no influence on this. Further information on data processing by Amazon can be found in the terms of use and data privacy provisions of Amazon Alexa.

Storage duration; retention periods

We generally store your data as long as this is necessary for the provision of our service and any associated services or we have a legitimate interest in further storage. In all other cases, we delete your personal data after 5 years unless we have to continue to store it in order to fulfil legal obligations or are entitled to pursue our legal claims.

3) Use of our email address/contact

If you send us an enquiry by mail, your information from it, including any possible contact details (“personal data”) given by you for the purpose of processing your request, shall be transmitted to us and then processed by us. Your personal data can then be made available to the relevant internal departments by our employees. The data will be processed for the purpose of processing your email/questions in accordance with Art. 6 Para. 1 Sentence 1 Lit. b GDPR for executing precontractual measures, which will take place upon your request, and in accordance with Art. 6 Para. 1 Sentence 1 Lit. f GDPR on the basis of our legitimate interest. Our legitimate interest is in answering your enquiry. The personal data collected by us for answering your question will be deleted after your request has been processed. Legal or contractual retention periods remain unaffected by this. You can object to the processing of your data at any time by sending us an email to datenschutz@becker-antriebe.com or a message by post to RPA Datenschutz & Compliance GmbH, Hauser Gasse 19 b, 35578 Wetzlar with the addition “data protection officer”. In a case such as this, processing your question cannot be continued.

4. No liability for partner sites

Please note that our partners and other Internet sites and services that are accessible through our websites have their own data privacy guidelines that are independent of us. We assume no responsibility or liability for the guidelines and procedures unrelated to us.

5. Disclosure of data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

you have given your explicit consent in accordance with Article 6 Para. 1 Sentence 6 Lit. a GDPR,
disclosure is necessary to assert, exercise or defend legal claims in accordance with Article 6 Para. 1 Sentence 1 Lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that a legal obligation exists for the transfer in accordance with Article 6 Para. 1 Sentence 1 Lit. c GDPR and
this is legally permissible and is necessary for processing contractual relationships with you in accordance with Article 6 Para. 1 Sentence 1 Lit. b GDPR.

6. Your rights as the data subject

You have the right:

to request information about your personal data processed by us according to the Article 15 GDPR. Notably you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if it have not been collected by us and the existence of automated decision-making, including profiling and, if applicable, meaningful information on their details;
to immediately request the correction of incorrect or completion of personal data stored by us in accordance with Article 16 GDPR;
to request the deletion of your personal data stored by us in accordance with Article 17 GDPR unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
to restrict the processing of your personal data in accordance with Article 18 GDPR if you dispute the accuracy of the data, if the processing is unlawful but you refuse the deletion of the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing in accordance with Article 21 GDPR.
to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another responsible party in accordance with Article 20 GDPR;
to revoke the consent given to us at any time in accordance with Article 7 Para. 3 GDPR. As a result, this means that we will no longer be allowed to continue processing data based on this consent in the future and
to complain to a regulatory authority in accordance with Article 77 GDPR. You can usually contact the supervisory authority at your usual place of residence or workplace or at our office headquarters.

7. Right to objection

If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Para. 1 Sentence 1 Lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR provided that there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to make use of your right to revocation or objection, simply send an email to datenschutz@becker-antriebe.com.

8. Data security

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss or destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

9. Validity of and changes to this data privacy policy

This data privacy policy is currently valid and is version 1.0. It may become necessary to change this data privacy policy because of the development of our website and offers above or due to changed legal or official requirements. The currently valid data privacy policy can be viewed and printed by you at any time on our website at https://www.becker-antriebe.com/kontakt/impressum.html