PRIVACY POLICY
This Privacy Policy explains what personal data we process when you visit breb.de, why we do so, and what rights you have. It applies exclusively to this website — not to processing that takes place when you are our customer or business partner.
1. Controller
The controller responsible for data processing on this website is:
BREB GmbH & Co. KG
Kapitän-Alexander-Str. 16
27472 Cuxhaven
Germany
Phone: +49 (0) 4721 590 54 0
Fax: +49 (0) 4721 590 54 99
Email: admin@breb.de
Managing Director: Arne Ehlers
2. Data Protection Officer
We have appointed a Data Protection Officer. You can contact him at:
Arne Ehlers
Kapitän-Alexander-Str. 16
27472 Cuxhaven
Germany
Phone: +49 (0) 4721 590 54 0
Email: management@breb.de
3. Server Log Files
Each time you access a page, our web server automatically records data transmitted by your browser. This happens regardless of whether you enter any information on the website:
- Your IP address
- Date and time of access
- The requested page or file and the amount of data transferred
- The previously visited page, if applicable
- Browser and operating system used
We use this data to deliver the website, maintain its stability and security, and investigate technical errors. The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in operating a website that functions properly and is protected against misuse. The data is not combined with other sources and is not used to identify you personally. Log files are rotated daily and deleted after no more than 14 days, unless a specific incident requires longer retention for evidentiary purposes.
4. Cookies
This website uses exactly one cookie named winter_session. It contains a random session identifier that allows the server to associate consecutive requests with the same browser — this is necessary for form submissions and the content management system to function. It contains no advertising identifier or profile and is deleted no later than when the browser is closed.
Because this cookie is strictly necessary to provide the service you have requested, we may store it without your consent pursuant to Section 25(2) No. 2 TDDDG; the legal basis for the associated processing is Art. 6(1)(f) GDPR. We do not use any cookies that require consent — which is why this website does not display a cookie banner.
5. Hosting
This website is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, at a data center in Falkenstein, Germany. The provider processes the access data referred to in Section 3 solely on our behalf and in accordance with our instructions, on the basis of a data processing agreement pursuant to Art. 28 GDPR. Hetzner's Privacy Policy is available at https://www.hetzner.com/de/legal/privacy-policy/.
6. Contact by Email, Telephone or Fax
This website does not have a contact form. If you contact us using the details published here by email, telephone, or fax, we process the data you provide — generally your name, contact details, and the content of your inquiry — in order to respond to it.
If your inquiry relates to a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. In all other cases, we rely on our legitimate interest in processing inquiries addressed to us pursuant to Art. 6(1)(f) GDPR. We retain this data until your inquiry has been resolved and you request its deletion, unless statutory retention requirements prevent us from doing so.
Please note that emails transmitted over the internet are not encrypted end-to-end in all cases and may, in principle, be read by third parties. Therefore, please do not send confidential information by unencrypted email.
7. Newsletter
You can subscribe to our newsletter on the Newsletter page. Your email address is required; company name, first name, and last name are optional. We use your email address to send you the newsletter and to confirm that the address belongs to you.
The newsletter is distributed via 1&1 Mail & Media GmbH, Elgendorfer Straße 57, 56410 Montabaur. When you submit the form, the information you provide is transmitted directly to this provider and stored there on our behalf, on the basis of a data processing agreement pursuant to Art. 28 GDPR.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link included in each newsletter or by contacting us. The lawfulness of processing carried out prior to withdrawal remains unaffected. After you unsubscribe, we delete your email address or place it on a suppression list solely for the purpose of ensuring that we do not contact you again.
8. Job Applications
If you apply for a position with us — by email to bewerbung@breb.de, by post, or via our careers page — we process the data you submit in order to make a decision regarding your application. This may include your contact details, CV, certificates and references, as well as notes we make during the application process.
The legal basis is Section 26(1) BDSG in conjunction with Art. 88 GDPR and Art. 6(1)(b) GDPR; both cover processing necessary for deciding whether to establish an employment relationship. If you voluntarily provide us with additional data, the legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
If you are not hired, we delete your application documents six months after rejecting your application, unless longer retention is necessary for the defense against legal claims or you have consented to longer storage. With your consent, we will add your application to our applicant pool, where it will be deleted after no more than two years. If you are hired, the data will be transferred to your personnel file.
9. Fonts
This website uses web fonts to ensure consistent display of typefaces. The font files are hosted on our own server and are loaded exclusively from there. No connection is established to third-party servers — in particular Google Fonts — and no data is transferred to third parties for this purpose.
10. What This Website Does Not Do
We state this explicitly because it determines what data leaves your browser: this website does not use web analytics or tracking, does not embed social media plugins, videos, maps, or advertising, and does not load scripts, fonts, or stylesheets from third-party servers. Apart from the newsletter form referred to in Section 7, which you complete and submit yourself, visiting this website does not transmit data to anyone other than us and our hosting provider.
11. SSL/TLS Encryption
This website uses TLS encryption for every connection. You can recognize this by the fact that the address begins with https:// and your browser displays a padlock symbol. As long as encryption is active, data that you transmit to us cannot be read by third parties while in transit.
12. Disclosure to Third Parties
We do not sell your data or disclose it for advertising purposes. Personal data is disclosed only:
to the processors named in this Privacy Policy, who act on our instructions on the basis of an agreement pursuant to Art. 28 GDPR;
where you have expressly consented, pursuant to Art. 6(1)(a) GDPR;
where we are legally required to do so, pursuant to Art. 6(1)(c) GDPR; or
where this is necessary for the establishment, exercise, or defense of legal claims, pursuant to Art. 6(1)(f) GDPR.
Personal data is not transferred to countries outside the European Economic Area.
13. Your Rights
With regard to the data we process about you, you have the following rights:
Access — Art. 15 GDPR: You may request, free of charge and at any time, information about what data we process about you, where it comes from, to whom we disclose it, and how long we retain it.
Rectification — Art. 16 GDPR: You may request the correction of inaccurate data and the completion of incomplete data.
Erasure — Art. 17 GDPR: You may request the deletion of your data unless we are required or permitted to retain it, for example due to statutory retention periods.
Restriction of Processing — Art. 18 GDPR: Instead of deletion, you may request that processing be restricted, for example while the accuracy of your data is being verified.
Data Portability — Art. 20 GDPR: You may request that we provide the data you have supplied to us in a structured, commonly used, and machine-readable format or transmit it to another controller.
Right to Object — Art. 21 GDPR: Where we process data on the basis of a legitimate interest, you may object for reasons arising from your particular situation. We will then cease processing the data unless we can demonstrate compelling legitimate grounds that override your interests.
Withdrawal of Consent — Art. 7(3) GDPR: You may withdraw any consent you have given at any time with effect for the future.
To exercise any of these rights, simply send an informal message to admin@breb.de.
14. Right to Lodge a Complaint with a Supervisory Authority
If you believe that we are processing your data unlawfully, you may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence or place of work. The supervisory authority responsible for us is:
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany
www.lfd.niedersachsen.de
15. Objection to Advertising Emails
The use of contact details published in the legal notice for the purpose of sending unsolicited advertising and informational materials is hereby expressly prohibited. We expressly reserve the right to take legal action in the event of unsolicited advertising being sent.
16. Changes to This Privacy Policy
We update this Privacy Policy whenever the way this website processes data changes — for example, when a service is added or removed. The version published here at the time of your visit always applies.