Data controller:
bk World Holding GmbH
bk Group Platz 1
91628 Endsee
Telephone: +49 98 43 – 98 01 0
info@bk.world
Contact details of our Data Protection Officer:
bk Group Platz 1
91628 Endsee
datenschutz@bk.world
A natural person is considered identifiable, if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special
characteristics that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means or any series of such operations in connection with personal data. The term is broad and covers virtually any handling of data.
The “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
• Your IP address, – Date and time of the request
• Time zone difference from Greenwich Mean Time
• Content of the request
• access status/HTTP status code
• Scope of data transfer
• Website from which your request is forwarded
• Browser, operating system and its interface, language and version of the browser software
• the location from which you retrieve data from our site
• as well as other connection data and sources that you access
This is usually done through the use of log files and cookies. More information about cookies can be found below.
We use this data to protect our legitimate interests
• to ensure that the website can be displayed on your computer
• to ensure the functionality of the website
• to optimise our website
• to ensure the security of our information technology systems. The legal basis for data processing is Art. 6(1)(f) GDPR.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Data that we collect for the provision of services will be deleted after the end of the
respective session.
If you have given us your express consent to process your data, Art. 6 (1) (a) GDPR is the legal basis for this processing.
If we process your data for the purpose of implementing pre-contractual or contractual measures, the legal basis is Art. 6 (1) (b) GDPR.
In all other cases (in particular when using a contact form), Art. 6(1)(f) GDPR is the legal basis.
Depending on the situation, your data will be passed on to, for example, hosting providers, shipping service providers for orders and payment service providers for processing paid orders.
Your data will be deleted if it can be inferred from the circumstances that your enquiry or the matter in question has been conclusively clarified.
However, if a contract is concluded, we will store the data required under commercial and tax law for the legally periods, i.e. ten years (cf. Section 257 HGB, Section 147 AO).
In the case of processing based on your consent, you have the right to withdraw your consent at any time.
RIGHT TO OBJECT: You have the right to object to data processing based on Art. 6(1)(f) GDPR and not to direct marketing for reasons arising from your particular situation.
In the case of direct marketing, however, you may object to the processing at any time without giving reasons.
The cookies we use only store the data described above about your
use of the website. This is not done by assigning it to you personally,
but by assigning an identification number to the cookie (“cookie ID”). The cookie ID is not connected to your name, your IP address or similar data that would enable the cookie to be assigned to you.
If you do not wish to use browser cookies, you can set your browser so that it does not accept cookies. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the “Block third-party cookies” setting in your browser.
We use cookies to protect our legitimate interest in improving our website and offering you a better and more personalised service. They enable us to recognise your computer when you return to our website and thus:
• store information about your preferred activities on the website and thus tailor our website to your individual interests
• store your log-in details and display preferences (e.g. language)
• speed up the processing of your enquiries.
• basis for data processing by cookies is Art. 6 para. 1 sentence 1 lit. f) GDPR.
Cookies are stored until you delete them or until the respective cookie expires. In this case, the cookie is automatically deleted from your computer.
The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. To do so, simply send us an informal email. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for its collection no longer applies.
Data storage is no longer necessary (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
better and thus tailor our service to your needs. When using Google Maps, data is transferred to Google and stored on Google servers. Here we would like to explain in more detail what Google Maps is, why we use this Google service, what data is stored and how you can prevent this.
When you visit our website, Google receives information that you have accessed the corresponding subpage of our website. Your IP address is transmitted in the process. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out beforehand.
Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or the needs-based design of the website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users about your activities on our website. We use Google Maps to show you interactive maps from Google Maps and thus enable you to have a better user experience on our website. This is also in our legitimate interest. You have the right to object to the creation of these User profiles, for which you must contact Google.
Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(2) Use and application of Google Web Fonts
We use Google Fonts on our website. These are the “Google fonts” from Google Inc. For the European area, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services.
You do not need to register or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you do not need to worry that your Google account data will be transmitted to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely.
When you visit a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.
To do this, the browser you are using must connect to Google’s servers. This allows Google to know that our website has been accessed via your IP address.
If you have consented to the use of Google Fonts, the legal basis for the corresponding data processing is this consent. According to Art. 6 (1) lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when collected by Google Fonts.
We also have a legitimate interest in using Google Fonts to optimise our online service. The corresponding legal basis for this is Art. 6 (1) lit. f GDPR (legitimate interests). However, we only use Google Fonts if you have given your consent.
Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(3) Use and application of Google Analytics
We use the Google Analytics tracking tool from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland on our website. This tool records and systematically evaluates your interactions with our website as a user.
The following data is stored about you:
IP address, usage data, click path, app updates, browser information, device information, JavaScript support, pages visited, referrer URL, downloads, Flash version, location information, purchase activity, widget interactions, date and time of visit.
The legal basis for the processing of your personal data is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time. The purpose of processing your personal data by the Google Analytics service is to analyse the interaction of our website visitors with our website. By evaluating the data obtained here, we can optimise our offering and increase user-friendliness. We delete or anonymise the data collected by Google Analytics as soon as it is no longer required for our purposes. This is the case after 26 months.
Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, please visit Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and
settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(4) Use and application of Google Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This feature allows you to link the advertising
target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised
advertising messages that have been tailored to you based on your previous usage and surfing behaviour on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. This allows the same personalised advertising messages to be displayed on every device you sign in to with your Google account. To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.
Google Analytics data to define and create target groups for cross-device advertising.
The summary of the data collected in your Google account is based solely on your consent, which you can give or withdraw from Google (Art. 6(1)(a) GDPR). For data collection processes that are not merged into your Google account (e.g. because you do not have a Google account or have objected to the merger), the collection of data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymous analysis of website visitors for advertising purposes.
Google also processes your data in the United States, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the United States. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights and settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(5) Use and application of Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising programme from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
We use conversion tracking as part of Google AdWords. When you click on an advertisement placed by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and been redirected to this page.
Each Google AdWords customer receives a different cookie. Cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of conversion cookies and the use of this tracking tool are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights and
settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(6) Use and application of Google Tag Manager
This website uses Google Tag Manager from Google Ireland Limited, Google
Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This service allows website tags to be managed via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. This means that no cookies are used and no personal data is collected.
cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been set at the domain or cookie level
once made, it remains in place for all tracking tags implemented with Google Tag Manager.
All tags used on our website are integrated via Google Tag Manager and activated on the basis of your consent (Art. 6 (1) (a) GDPR). You will find the option to revoke your consent in the description of the individual services. If you object to a service, this objection will also be automatically transferred to the other services included in Google Tag Manager.
Google also processes your data in the United States, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the United States. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.
(7) Use and application of Google AdSense
Our website uses Google AdSense, a service for integrating advertisements from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google AdSense enables context-related advertising to be displayed on our pages. This involves the processing of usage data, such as your IP address, information about your browser, the pages you visit and, where applicable, interest profiles. This information may also be used by Google to display interest-based advertising to you.
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG, which you give via our cookie or consent banner. You can revoke this consent at any time with effect for the future.
Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, please visit Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and
settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(8) Use and application of Google Recaptcha
We use Google reCAPTCHA to protect our forms (e.g. contact or login forms) from misuse by automated requests. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether the data entry is being made by a human or a
automated programme. To do this, the service analyses various information (e.g. IP address, mouse movements, time spent on the page) and transmits it to Google.
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR (legitimate interest) in the prevention of misuse and spam. If consent has been obtained via the consent banner, processing is carried out on the basis of Art. 6 (1) lit. a GDPR.
Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights and settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(9) Use and application of Google Double Click
Our website uses DoubleClick, an online marketing platform from Google Ireland Limited, to improve the display and evaluation of online advertising.
DoubleClick uses cookies to track user actions and better tailor advertisements to individual interests. This allows Google to track which ads were displayed and clicked on and to compile anonymous statistics.
Data processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG.
You can revoke your consent at any time via our cookie management system or deactivate personalised advertising via the page https://adssettings.google.com/.
Google also processes your data in the United States, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the United States. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights and settings options for protecting your
privacy: http://www.google.de/intl/de/policies/privacy.
(10) Use and application of Google Play
Our website may contain content or links to the Google Play Store (e.g. for installing apps). The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When accessing such content or being redirected to Google Play, technical data (e.g. IP address, browser information and device identifiers) is transmitted to Google in order to provide and optimise the service.
If personal data is processed, this is done on the basis of your consent in accordance with Art. 6 (1) (a) GDPR or our legitimate interest in accordance with Art. 6 (1) (f) GDPR in the functional presentation of our online offerings.
Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. For more information, please visit Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and
settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.
(11) Use and application of Google Static
For the uniform display of fonts and to improve loading times, we use resources from the Google Static domain (gstatic.com), operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When our website is loaded, fonts and technical components are automatically retrieved from Google servers. Your IP address may be transmitted to Google in order to provide the content.
The use is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in an appealing and technically optimised presentation of our website. If active consent is required (e.g. for embedded Google Fonts), processing is carried out in accordance with Art. 6 (1) lit. a GDPR.
Google also processes your data in the United States, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the United States. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and
settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.
(12) Use and application of YouTube videos
We have integrated YouTube videos into our website, which are stored on the servers of the provider YouTube and can be played from our website via an embed. The videos are embedded with the option for advanced privacy settings activated. When you play these videos, cookies are stored on your computer.
YouTube cookies and DoubleClick cookies are stored and data may be transferred to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) as the operator of YouTube.
When playing videos stored on YouTube, at least the following data is currently transferred to Google as the operator of YouTube and the DoubleClick network:
network: IP address and cookie, the specific address of the page accessed on our site, system date and time of access, and your browser ID.
This data is transferred regardless of whether you have a Google user account that you are logged into or whether you do not have a user account. If you are logged in, this data may be directly associated with your account by Google. If you do not want this data to be associated with your profile, you must log out before activating the play button for the video.
The integration of YouTube videos is based on your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. This consent is obtained via our cookie or consent banner and can be revoked there at any time with effect for the future.
YouTube and Google store this data as usage profiles and may use it for advertising, market research and/or the needs-based design of their websites. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google as the operator of YouTube to exercise this right.
Google also processes your data in the United States, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the United States. For more information, see Adequacy decision for the EU-US Data Privacy Framework | European
Commission.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.
(13) Use and application of the Meta (Facebook) Pixel
We use the so-called Meta Pixel (formerly: Facebook Pixel) from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, on our website.
This analysis tool enables us to measure the effectiveness of our advertisements placed on Facebook or Instagram and to optimise our online marketing measures.
Meta Pixel allows us to track whether users were redirected to our website after clicking on an advertisement on Facebook or Instagram and whether they performed certain actions there, such as making an enquiry or a purchase. This evaluation helps us to understand the effectiveness of our campaigns and to make future advertising more targeted.
The use of Meta Pixel is based exclusively on your consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG, which we obtain via our consent banner. You can revoke your consent at any time with effect for the future by revisiting the cookie settings on our website and deactivating tracking.
The data processed within the scope of Meta Pixel includes information about the device used, the browser type, the IP address, referrer URLs, pixel IDs and behaviour on our website (e.g. page views, clicks or order processes). If you are logged in to
Facebook or Instagram, Meta can assign this information to your user account and display interest-based advertising there.
We have entered into a joint controller agreement with Meta in accordance with Art. 26 GDPR, which regulates the respective data protection obligations.
This agreement is available at https://www.facebook.com/legal/controller_addendum. Meta may also use the processed data for its own purposes, such as improving its advertising system or profiling. We have no influence on this processing.
The data may also be transferred by Meta to servers of Meta Platforms, Inc. in the USA. To ensure an adequate level of data protection, Meta uses the standard contractual clauses approved by the European Commission in accordance with Art. 46 GDPR. Further information about data processing by Meta can be found in Meta’s privacy policy at https://www.facebook.com/privacy/policy/.
Cookies set via Meta Pixel are generally stored for up to 180 days, unless you revoke your consent beforehand or delete the cookies in your browser. After this period, the data will be deleted unless it is still required for the purposes mentioned above.
(14) Use and application of Instagram
Instagram is also used on our website. Instagram is a service that acts as a
audiovisual platform that allows users to share photos and videos and also enables the redistribution of such data on other social networks. The operating company of Instagram’s services is Meta, Inc., 1 Hacker Way, Menlo Park, CA 94025.
Each time one of the individual pages of this website, which is operated by the controller and on which an Instagram component (Insta button) has been integrated, is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Instagram component to download a representation of the corresponding component from Instagram. As part of this technical process, Instagram receives information about which specific subpage of our website is visited by the data subject.
If the data subject is logged into Instagram at the same time, Instagram recognises which specific subpage the data subject visits each time the data subject accesses our website and for the entire duration of their stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.
Instagram receives information via the Instagram component that the data subject has visited our website whenever the data subject is logged in to Instagram at the same time as visiting our website; this occurs regardless of whether the data subject clicks on the Instagram component or not
If the data subject does not want this information to be transmitted to Instagram
person, the person can prevent the transmission by logging out of their Instagram account before visiting our website.
Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
(15) Use and application of Elementor
The WordPress plugin Elementor is used on the website. The provider is Elementor Ltd., 12 Abba Eban Ave, Herzliya, Israel.
Elementor is used for the design and technical implementation of the website content (page builder). Page content, layout elements and widgets are provided within the WordPress system.
Provided that no external libraries or cloud services from Elementor are integrated, processing takes place exclusively on the website operator’s servers.In this case, no personal data is transferred to Elementor.
However, if cloud functions, templates or external content from Elementor are used (e.g. fonts, icons or templates from the Elementor Library), a connection to Elementor’s servers may be established. In this case, technical data (e.g. IP address, browser information) is transmitted.
The legal basis for this is the legitimate interest pursuant to Art. 6 (1) lit. f GDPR in a uniform and modern presentation of the website.
Further information on data processing by Elementor can be found at: https://elementor.com/about/privacy/
(16) Use and application of WebToffee
The website uses the GDPR Cookie Consent plugin from WebToffee / Mozilor Limited, 3rd Floor, Nattakom Arcade, Kottayam, Kerala, India.
The plugin is used to obtain and manage consent for cookies and tracking services in accordance with the GDPR and TDDDG.
To do this, cookies are set in the user’s browser to store the consent status.
The plugin blocks all non-essential cookies and scripts until explicit consent has been given.
The following data is processed:
• IP address (in abbreviated form)
• Consent or rejection status
• Timestamp and origin of consent (consent log)
This information is stored locally on the website operator’s server and is not transmitted to WebToffee.
Processing is carried out on the basis of Art. 6 (1) (c) GDPR (fulfilment of legal obligations) and Art. 6 (1) (f) GDPR (proof of consent given).
Further information can be found in the provider’s privacy policy: https://www.webtoffee.com/privacy-policy/
Video surveillance serves to protect visitors, employees and the property and infrastructure of the respective lounge.
The controller within the meaning of the General Data Protection Regulation (GDPR) is the respective operator of the bk World Lounge in which the video surveillance system is located.
The exact name and contact details of the operator can be found in the respective video surveillance notice on site.
Video surveillance is carried out on the basis of Art. 6 (1) (f) GDPR (legitimate interest). Processing is carried out for the purpose of protecting property, ensuring visitor safety, and investigating and preventing criminal offences.
The legitimate interests pursued by video surveillance are the exercise of domiciliary rights, the safeguarding and enforcement of legal claims, the preservation of evidence in the event of damage or suspicion, and the deterrence and prevention of criminal offences.
The recordings are stored for a maximum of 96 hours and then automatically deleted if they are no longer required to achieve the aforementioned purposes (e.g. in the case of an ongoing investigation).
Access to the video recordings is restricted to authorised parties, insofar as this is necessary to achieve the purposes, in particular the respective operator of the bk World Lounge, bk World Holding GmbH (e.g. in the context of technical support or website operation), any security service providers commissioned, police authorities within the scope of their statutory
investigative powers, and, in the case of emergency calls made using the installed emergency telephones, the respective emergency call operators.
1. Right of access (Art. 15 GDPR)
You have the right to obtain information about whether and which personal data we process about you. This includes information about the purposes of processing, the categories of data, the recipients, the planned storage period and your other rights in connection with this processing.
2. Right to rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data.
3. Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data, provided that none of the legal reasons for storage or processing prevent this (e.g. legal retention obligations or overriding legitimate interests).
4. Right to restriction of processing (Art. 18 GDPR)
You may request that the processing of your personal data be restricted, e.g. while requests for correction or objection are being reviewed.
5. Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, that you have provided to us in a structured, commonly used and machine-readable format and, where applicable, to transmit that data to another controller.
6. Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR.
If an objection is lodged, we will no longer process your data unless there are compelling legitimate grounds for doing so or the processing serves to assert, exercise or defend legal claims.
7. Right to withdraw consent (Article 7(3) GDPR)
If the processing is based on your consent, you may withdraw it at any time with effect for the future. The withdrawal does not affect the lawfulness of the processing carried out up to that point.
8. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to complain to a data protection supervisory authority about the processing of your personal data. The supervisory authority responsible is usually that of your habitual residence, your place of work or the place of the alleged infringement.
9. Right relating to automated decisions, including profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
We do not engage in such automated decision-making. Insofar as we evaluate data automatically, this is done exclusively for the purpose of optimising our services, statistical analysis or interest-based communication and without any significant impact on the persons concerned.
Note:
To exercise your rights, you can contact the controller or the data protection officer at any time – the contact details can be found in the legal notice or in the “Controller” section
