privacy policy

 Responsibleinfo@borbet.de Data Protection Officer datenschutz@borbet.de Legal basis for our data processing

The processing of personal data can be based on various legal grounds. If we need your data to fulfil a contract with you or to respond to enquiries from you regarding a contract, the legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DSGVO. If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1. p. 1 lit. a DSGVO. We carry out some data processing on the basis of our legitimate interest, whereby a balancing of your interests worthy of protection and our legitimate interests is always carried out. The legal basis for this is Art. 6 para. lit. f DSGVO. If processing is necessary to fulfil a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 lit. c DSGVO.

Below we explain how we process personal data via our website.

Data processing during website access

During the mere informational use of the website, i.e. if you do not register or otherwise transmit information to us (e.g. via a contact form), we collect the following technical information (log file data):

- operating system of the end device with which you visit our website.
- browser (type, version & language settings)
- the amount of data retrieved
- the current IP address of the end device with which you visit our website
- date and time of access
- the URL of the previously visited website (referrer)
- the Internet service provider of the accessing system

The collection of this data is technically necessary in order to display our website to you and to ensure stability and security. We (and our service provider) do not regularly know who is behind an IP address. We do not combine the data listed above with other data.
We pass on the collected data to the responsible internal departments or to external service providers, contractors (e.g. hosting) for processing, website presentation, content creation or technical support.
The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and for protection against misuse, our legitimate interest in data processing prevails at this point. Log files are automatically deleted by us after 6 weeks. 

Data securtiy

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress.

Data transmission 

As a matter of principle, your personal data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the execution of the contractual relationship, or you have previously expressly consented to the transfer of your data.

 
External service providers and partner companies, such as online payment providers or a shipping company commissioned with delivery, only receive your data insofar as this is necessary for the processing of your order / your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers process your personal data on our behalf, we ensure within the scope of order processing pursuant to Art. 28 DSGVO that they comply with the provisions of the data protection laws in the same manner. Please also refer to the data protection notices of the respective providers.

 
We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, through EU standard contracts or Binding Corporate Rules.

Contact

When you contact us by e-mail or via a contact form, the data you provide will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f DSGVO. Insofar as we request information via our contact form that is not necessary for contacting you, we have always marked this as optional. We use this information to specify your request and to improve the processing of your request. Any communication of this additional information is expressly on a voluntary basis and with your consent, Art. 6 para. 1 p. 1 lit. a DSGVO. 

Application here. hereOnline orders shop

When you place an online order on our website, we collect the data required for the conclusion of the contract. The data is stored for the duration of the contract and in accordance with legal obligations. As far as necessary for the processing of the order, we forward your address data to a shipping service provider. The legal basis is the conclusion and execution of a contract in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO.

 
For payment processing, we use payment service providers, which are always identified and accept your entries. They are therefore recipients of your personal data collected in connection with the payment process. The legal basis for the involvement of payment service providers is also the processing of the contract in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO.

 
We currently use the payment service Paypal:
PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg, https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE

Wheel configurator Use of cookieshttps://www.borbet.de/en/datenschutz/cookiehttps://www.borbet.de/en/datenschutz/cookieIntegration of third-party offers on our website Consent Management Tool Google Fonts 

For the uniform display of fonts on our website, we use Google Fonts from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We have integrated the Google fonts locally, i.e. on our web server - not on Google's servers. As a result, there is no connection to Google servers and thus no data transfer or storage. The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO.
Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/ 


Google Maps 

This site uses the mapping service Google Maps. Google Maps is a mapping service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In order to use the Google Maps functions, information, including the IP address and the address entered as part of the route function, may be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there.

When you visit a website that contains Google Maps, your browser establishes a direct connection with Google's servers, whereby the map content is sent to your browser and integrated by it. By using our consent management tool, this is prevented if you have not consented to the data processing with regard to Google Maps. Due to the integration of Google Maps, no data is therefore transmitted without your consent.

The provider of this site has no influence on this data transmission. According to current knowledge, this includes the following data:
- Date and time of the visit to the website in question,
- Internet address or URL of the website called up,
- IP address, (start) address entered as part of route planning.


As a necessary sub-function, Google Maps also dynamically loads Google Fonts within this service for the visual design of fonts and styles in Google Maps. In the process, your IP address is transferred to Google servers in the USA.

Google Maps is used in the interest of an attractive presentation of our online offers and to make it easy to find the places we have indicated on the website. If you do not wish Google to process your data via this service, you can deactivate the use of JavaScript in your browser settings. Please note that in this case the interactive map function of Google Maps cannot be used.
Insofar as data is processed outside the European Economic Area / the EU, where there is no level of data protection corresponding to the European standard, Google states that it uses standard contractual clauses.
More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/. 

The collection and storage of data only takes place after explicit consent according to Art. 6 para. 1 p. 1 lit. a DSGVO. This consent can be revoked at any time with effect for the future.

Google reCaptcha

We use reCAPTCHA v2 on our websites. reCAPTCHA is a service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In connection with the use of reCAPTCHA, personal data is processed on our behalf by Google as a data processor in accordance with the Google Cloud Terms and the Data Processing Addendum.

reCAPTCHA is used to prevent abusive automated input in web forms and thus to protect our website and the underlying technical systems.

When you access a webpage on which reCAPTCHA is integrated, a connection to Google’s servers is established. In the process, a cookie (_GRECAPTCHA) may be set and, in particular, the following data may be processed: IP address, browser and device information, as well as usage and interaction data.

Through the use of our consent management tool, reCAPTCHA is only loaded after you have given your consent. If you do not provide consent, no data will be transmitted to Google.

Where data is processed outside the EEA, in particular in the United States, a level of data protection equivalent to that in the European Union cannot be guaranteed. However, Google is certified under the EU–US Data Privacy Framework. In addition, standard contractual clauses (SCCs) may be applied.

Data processing is carried out on the basis of your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with future effect via the cookie settings.

 Google Analytics 4https://marketingplatform.google.com/about/analytics/terms/de/https://policies.google.com/?hl=de.Google Ads https://policies.google.com/technologies/ads?hl=de.
Social Bookmarks 
-Facebook:  https://www.facebook.com/about/privacy/update 
-Instagram: 
https://help.instagram.com/155833707900388 
-LinkedIn: 
https://www.linkedin.com/legal/privacy-policy
-Xing: 
https://privacy.xing.com/de/datenschutzerklaerung
-WhatsApp: 
https://www.whatsapp.com/legal/?l=de
Your rights

We will be happy to provide you with information on whether and which of your personal data is processed by us and for what purposes (Art. 15 DSGVO). In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal conditions.

You have the right to object to processing under the legal conditions (Art. 21 DSGVO).

To exercise your above rights, please contact us by e-mail at datenschutz@borbet.de or by post at BORBET GmbH, Hauptstraße 5

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection law (Article 77 DSGVO).

The supervisory authority responsible for us is the: 

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

PO Box 20 04 44

poststelle@ldi.nrw.de

  

Status March 2026