Privacy Notice

This data protection information applies to data processing by:
Bundesanstalt für Materialforschung und -prüfung (BAM) ,
Unter den Eichen 87
12205 Berlin
Germany
Data Protection Officer at BAM:
Dipl.-Ing. Arne Nymschefsky
Phone: +49 30 8104-3773
E-Mail: datenschutz(at)bam.de
When you visit our website https://webshop.bam.de/, information is automatically sent to our website server by the browser used on your device. This information is temporarily stored in a log file. The following information is recorded without your intervention and stored until it is automatically deleted:
  1. IP address of the requesting computer
  2. date and time of access
  3. name and URL of the retrieved file
  4. website from which the access is made (referrer URL)
  5. browser used and, if applicable, the operating system of your computer and the name of your service provider.
We will process the above data for the following purposes:
  1. ensuring a smooth connection with the website
  2. ensuring our website is user-friendly
  3. evaluation of system security and stability
  4. for administrative purposes
The legal basis for data processing is as per Article 6(1)(1)(f) GDPR. Our legitimate interest complies with the purposes for data collection listed above. Under no circumstances do we use the data collected for drawing conclusions about you personally.
In addition, we use cookies when you visit our website. You can find a more detailed explanation about this under Clause 4 of this data protection statement.
In BAM's Webshop, users are offered the option to register by providing personal data.
The following personal data should be entered on an input screen and transmitted to BAM and stored:
  1. Name
  2. Forename
  3. Company
  4. E-Mail
  5. Legal status
  6. Street/house number or post office box
  7. Postcode
  8. City
  9. State
  10. Phone
Non-personal independent standard values for the permitted use of different payment methods as well as maximum amounts permitted per payment method are created in the customer data record.
The legal basis for the data processing is Article 6(1)(1)(b) GDPR. The purpose of the data collection is the fulfilment of contractual obligations and pre-contractual measures resulting from the orders placed.
The collection of this data takes place:
  1. to be able to identify you as our contractual partner
  2. to check the plausibility of the data entered
  3. to process your order
  4. to process any existing warranty claims and to assert any claims against you
BIf you have any questions, there is an option to contact us using a form provided on the website. You will need to provide a valid email address and a name so that we know who the enquiry is from and can answer it. Further information can be provided voluntarily.
The contact form available in the BAM Webshop generates an email to the person responsible for the Webshop with the data entered on the input screen. No further automatic storage takes place.
Data processing for the purpose of contacting us is carried out as per Article 6(1)(1)(a) GDPR on the basis of your voluntarily given consent. The personal data collected by us in the course of your contact will be automatically deleted after we have dealt with your enquiry.
If an order is sent using the contact details provided on the website, the information under Clause 2(b) of this data protection statement applies accordingly.
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:
  1. you have given your express consent as per Article 6(1)(1)(a) GDPR
  2. disclosure is required as per Article 6(1)(1)(f) GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data
  3. in the event that there is a legal obligation to disclose your data as per Article 6(1)(1)(c) GDPR
  4. it is legally permissible and necessary for the processing of contractual relationships with you as per Article 6(1)(1)(b) GDPR
In particular, this may include the disclosure to shipping companies for the purpose of delivering the goods you have ordered and the disclosure of payment data to payment service providers or credit institutions in order to carry out a payment transaction. Disclosed data may only be used by the third parties for the afore-stated purposes.
We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.
Information stored in the cookie is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity.
The use of cookies serves to make our product more user-friendly for you. We use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
For the BAM Webshop, the following data is stored in cookies within a session:
  1. language
  2. current shopping basket
  3. login name
Data will not be disclosed to third parties.
The data processed by cookies are necessary for the afore-stated purposes to safeguard our legitimate interests as per Article 6(1)(1)(f) GDPR. Only cookies that are essential for the technical provision of the Webshop are used.
Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
Our website uses the Piwik web analysis service to analyse web visitors. Piwik uses "cookies", which are text files saved on your computer and enable us to analyse the use of individual websites. To this end, the usage information generated by the cookie is transferred to our server and saved for usage analysis that helps to optimise our website. Your IP address is anonymised immediately in this process so that you will remain anonymous as a user to us. The information generated by the cookie about your use of this website will not be disclosed to third parties. You may disable the use of cookies by adjusting your browser settings, but this may have the consequence that you may not be able to use all features of this website. These cookies expire after 13 months.

Specifically, BAM receives the following data about visitors:
  1. IP address (anonymised)
  2. Location: country, region, city, approximate latitude and longitude (geolocation)
  3. Date and time of the query (visit of the website)
  4. Visited page title and URL
  5. URL of page previously visited (referrer URL)
  6. Screen resolution of user's device
  7. Local time in visitor’s time zone
  8. Clicked and downloaded files (downloads)
  9. Links to an external domain clicked (outlink)
  10. ite generation time (required for the creation of websites by the web server and time needed by visitor for subsequent downloading: site speed)
  11. Browser language, version, plugins, the version of the used operation system and device ID (user agent header)
  12. Language of site visited
  13. Campaigns
  14. Search on the website
  15. Events
If you do not agree with us saving and analysing any data from your visit, you can withdraw by clicking the link below at any time. In this case, a so-called opt-out cookie is saved in your browser with the result that Piwik does not collect any session data. Warning: if you delete your cookies, this has the consequence that the opt-out cookie will also be deleted and you may have to re-activate it.
Unless otherwise stated in this data protection statement, we will only store the data you provide to us for as long as is necessary to fulfil the relevant purpose for which your data was provided, or to comply with any legal requirements.
You have the right:
  1. pursuant to Article 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about the details
  2. pursuant to Article 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us
  3. pursuant to Article 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right of freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims
  4. pursuant to Article 18 GDPR, to request the restriction of the processing of your personal data insofar as you dispute the accuracy of the data, the processing is unlawful but you object to its deletion, we no longer require the data but you need them for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Article 21 GDPR
  5. pursuant to Article 20 GDPR, to receive the personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller
  6. pursuant to Article 7(3) GDPR, to revoke your given consent at any time. As a result we will no longer be allowed to continue the data processing based on this consent for the future
  7. pursuant to Article 77 GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office
If your personal data is processed on the basis of legitimate interests as per Article 6(1)(1)(f) GDPR, you have the right to object to the processing of your personal data as per Article 21 GDPR, provided there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you would like to make use of your right of revocation or objection, an email to datenschutz(at)bam.de is sufficient.