The following detailed information on data protection explains which personal data is collected on our websites and which personal data we process and use in what way.
1. Responsible controller
2. General information on processing personal data
As an international company, we work together with external service providers. To the extent that processed data contains personal information, corresponding contractual agreements and organisational measures have been enacted according to applicable law which ensure the security of your personal data. Our external service providers are bound by our instructions and are regularly monitored.
In our company, compliance is monitored by our data protection officers. Our employees are trained to handle personal data and have committed to comply with the respective data protection legislation .
As a general rule, our website can be used without providing personal data. Insofar as personal data (e.g. name, address or e-mail addresses) are collected, this is always done, as far as possible, on a voluntary basis.
We would like to point out that data transmission on the internet (e.g. when communicating by e-mail) may involve gaps in security. We try to protect your data from unauthorised access by third parties by taking precautions such as pseudonymisation, data economy, observing deletion periods and taking into account the current state of technology. Despite these protective measures, however, we cannot completely rule out unlawful processing by third parties.
3. Data processing in the case of access from the Internet
When you visit our websites, our web servers save each access temporarily in a log file. The following data is captured and processed until automated deletion:
- Anonymized IP address of the requesting computer
- Date and time of access
- Time zone
- Access status/http status code
- Volume of data transferred in each case
- Operating system and its interface
- Identification data of the browser and operating system used
- Language and version of the browser software
- Name and URL of the retrieved data, content of the request
- Report whether the retrieval was successful
- Website from which the access takes place
- Name of your Internet service provider
When this website is used purely for informational purposes, B. Braun only collects the personal data that is technically required in order to display and enable the use of the website (establishment of connection), for system securityand stability, for the technical administration of the network infrastructure and to optimise the website. The legal basis for this is a legitimate interest of B. Braun(Art. 6 (1) lit. f GDPR).
You may object to this data processing. If you object to the use of the data, please note that you may only be able to use our services to a limited extent.
4. Purpose of the data use
In accordance with the principle of data minimisation of the General Data Protection Regulation, we only process personal data on our website if it is necessary for the purpose you have requested, if we are obliged to do so due to legal regulations or a contract, if we have a legitimate interest and/or if you voluntarily provide the data to us.
When entering personal or business data (e.g. e-mail address, name, address), the disclosure of your data is performed on an explicitly voluntary basis.
We process your contact and business-relevant data based on statutory regulations in connection with existing or pending business relationships In addition, with your input, you declare your consent for the personal data entered to be processed for the purpose designated by you. We process the provided data only as long as required for the intended purpose and delete it after fulfilling the purpose or after expiration of the respective storage periods. Processing does not occur for any other purpose. If you object to the processing of your data, please note that you may only be able to use our services to a limited extent. In order to provide you with a comprehensive range of services, your data will be transmitted and used within the B. Braun Group (for information on the B. Braun Group, click here).
The following are possibilities of how we can use the data:
Due to statutory regulations:
- Execution of our General Terms and Conditions
- Management of our business
- Protection from or determination of possible fraudulent transactions
Due to contractual purposes:
- Payment processing for purchases and other services
- Processing of your application documents
Based on our legitimate interest:
- Determining the effectiveness of our advertising
- Development of new products and services
- Analysis of the use of our products, services and websites
- Knowledge of how you reached our website
- Website stability and security
Your consent to processing of your personal data can be revoked at any time with effect for the future. Your consent may be required in various cases:
- to receive newsletters (see section 17 for further information)
- sending of samples, bonuses, , products and information
- signing up for prize competitions, programs or offers at your request Delivery of other services that we have offered you
- surveys on our websites
- development and provision of advertising tailored to your interestsmaking contact via our contact forms form (see section 15 for further information)
6. Term of storage
Your data is stored by B. Braun for as long as required for certain purposes. Consequently, your data is deleted by B. Braun if and when:
- the relevant legal basis for the processing of your personal data no longer exists,
- the purpose of processing your personal data no longer exists,
- you withdraw of your consent to the processing of your personal data,
- a legal obligation makes it necessary to erase them, or
- you have objected to the processing of your personal data,
unless storage periods stipulated by law apply. B. Braun may only delete your data when these retention periods have expired.
This does not apply to data whose erasure would involve disproportionate effort.. In cases like these, B. Braun is deemed to have a legitimate interest within the meaning of Article 6(1) lit. f GDPR in storing your data.
7. Automated decision-making
We do not use fully automated decision-making pursuant to Art. 22GDPR to establish and implement the business relationship. Should we use these methods in individual cases, we will inform you thereof separately when required by law.
We use automated methods to process your data in part, with the objective of evaluating certain personal aspects (profiling). We use profiling to provide products that may interest you on a targeted basis, for example.
8. Obligation to provide personal data
Within the scope of our business relationship, you are required to provide the personal data that is necessary in order to commence and implement the relevant business relationship and fulfil the contractual obligations associated with it or that we are required by law to collect. Without this data, we will generally not be able to enter into the business relationship with you and fulfil the obligations that arise from it.
This website contains links to websites of third parties over whose content B. Braun has no influence. After clicking on a link, you leave the sphere of responsibility of the B. Braun Group. Processing of data therefore no longer takes place within our influence.
10. Protection of minors
Children and persons under the age of 18 normally do not transmit personal data to us without the consent of their parents or legal guardians. We do not request personal data from minors and we assure that we do not knowingly collect personal data from minors, use it in any way or disclose it to third parties without authorisation.
11. Transmission of data via the Internet
The Internet is a globally open platform. Due to the Internet's inherent mode of operation and the systemic risks involved, any data transmissions are made at your own risk. For your security, we exclusively offer our services via encrypted transmission.
12. Transfers of data to third countries (non-EU countries)
We transfer your data to countries outside the European Union / European Economic Area (third countries) only to the extent that
- it is necessary in order to perform your orders,
- it is required by law or
- you have given us your consent.
To the extent that we transfer your data to a third country or an international organization, this takes place in accordance with the GDPR. Beyond that, we only transfer the strict minimum amount of data necessary, in line with the principle of data minimization.
In some cases, we use service providers whose corporate headquarters, parent company or sub-contractors are located in a third country. Your data is only transferred if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR), appropriate safeguards are provided (e.g. standard contractual clauses issued by the European Commission) and enforceable rights and effective remedies are available to you as a data subject. We have contractually regulated compliance with the GDPR and its requirements with the service providers.
Our websites also use so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser. They do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective and secure. Some cookies (so-called "functional cookies", e.g. for language settings and ordering processes) are those that are absolutely necessary to ensure essential functions of the website. Without these, the website cannot be used as intended.
There are two different types of cookies:
- Transient cookies: Most of the cookies we use are so-called "transient cookies", in particular "session cookies". These cookies are automatically deleted after the end of your visit. They enable us to recognise your browser when you return to our website within the same session.
- Persistent cookies: Other cookies, so-called "persistent cookies", are only automatically deleted from your end device after a predefined period of time (which varies depending on the type of cookie).
14. Security measures
We have taken extensive precautions to protect the security of your data. Your data, which you have entered e.g. in HTML websites (contact forms) are transmitted in an encrypted form (SSL - Secure Socket Layer) via the public data network to B. Braun.
This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as for example, the inquiries that you send to us as the website provider. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
15. Forwarding of data to third parties
Your personal data will not be forwarded to third parties (i.e. outside the B. Braun Group) unless you have given us your prior consent. Excluded from this provision is the forwarding to service partners, such as for example parcel service providers or freight forwarders, if the transmission is necessary for the order processing or delivery of the goods.
The logistics service providers receive the data required for delivery for their own use. We limit the transferred data to the necessary extent.
In addition, other service providers are involved, such as IT service providers or the hosting service provider for the website. These companies work for B. Braun within the framework of so-called processing on behalf. Braun and may only use personal data in accordance with our instructions. B. Braun has obligated these service providers to the General Data Protection Regulation as per contract and monitors these companies.
Further excluded is the transfer of data for the management of orders, the delivery of goods or services, and for accounting purposes within the B. Braun Group. To transfer the data, it may be stored in the cloud application salesforce.com, Inc. The Landmark @ One Market Street, Suite 300, San Francisco, CA 94105, USA ("Salesforce") (see section 15). Beyond this, no data is transferred to third parties without your consent.
In all these cases, the data is transferred in accordance with the applicable national and European data protection provisions; the scope of the data transferred is limited to the necessary minimum.
We have concluded a data processing contract with Adobe and fully implement the strict requirements of the German data protection authorities when using Adobe Analytics.
17. Use of Friendly Captcha
In order to protect contact forms on our website from spam and misuse, we use the "Friendly Captcha" service from Friendly Captcha GmbH (Germany). By using this service, it is possible to distinguish whether the corresponding input is of human origin or is abusive due to automated machine processing.
The tool prevents automated and abusive requests by so-called "bots". As part of this process, your IP address is captured by Friendly Captcha to send a cryptographic task to your device. This task is solved in the background and as soon as it is solved, a confirmation is sent by Friendly Captcha to the server that this is a natural person.
In this regard, Friendly Captcha processes and stores the following data:
- IP address of the requesting computer (anonymised via one-way hashing)
- Information about the browser and operating system used
- Anonymised counter per IP address to control the cryptographic tasks
- Website from which the access took place (referrer URL)
For more information on data processing, please visit the Friendly Captcha website: https://friendlycaptcha.com/de/legal/privacy-end-users/
18. Lead Forensics
This website uses Lead Forensics, a B2B sales and marketing enablement tool. It is operated by Lead Forensics, UK Headquarters, Communication House, 26 York Street, London, W1U 6PZ, UK.
The Lead Forensics tool uses a tracking code for identifying companies visiting our websites by their business IP addresses. This is not the same as cookies. The Lead Forensics tracking code only provides information that is readily available in the public domain. It does not and cannot provide individual, personal or sensitive data about who has visited our website. Under no circumstances will the data be used to personally identify individual visitors. If IP addresses are collected, they are anonymised immediately after collection. The information generated by the Lead Forensics tracking code is transferred to the Lead Forensics tool and processed and stored in the UK in a secure environment.
The Lead Forensics Tool does not provide us with IP addresses. It provides us with information about which companies have visited our website, the date and duration of their visit and the web pages they visit. This information allows us to analyse the use of our website and eventually contact these companies about their experience or for sales purposes. As an international company, to be able to guarantee you the best service, we transfer this information to our subsidiaries and distributors as necessary. Beyond this purpose, no personal data is passed on to third parties.
For more information, please visit www.leadforensics.com.
19. Adobe Target
This website uses Adobe Target, a service provided by Adobe Systems Software Ireland Limited ("Adobe") to analyse and optimise the website.
With Adobe Target, so-called A/B tests or multivariate tests can be performed on the website. The software thereby controls a variant which is modified in comparison to the original version of the website (different design or content). In this way, the visitor's preferred variant can be found out and the website can be optimised according to the visitor’s needs. In these cases, the variants can also be controlled permanently for certain visitor segments. Adobe Target does not collect any IP addresses or personal information of users for this purpose. IP addresses are only used by Adobe Target for the duration of the session (in memory, never persistently). User behaviour is evaluated on the basis of quantitative methods.
Tests and variants are also controlled with the help of cookies. For further information on cookies and the opt-out options of our Cookie Consent function, please refer to our cookie policies.
You also have the option of manually deactivating Adobe Target by opting out of the cookie via this link: https://bbraunmelsungenag.tt.omtrdc.net/optout
However, there is no documentation of your decision via this route and the opt out cookie may be in conflict with the decision you may have made when accessing our website via our cookie consent function.
20. Customer Journey / Conversion Tracking / Google Ads
Facebook Conversion Tracking
Within our website, we use the "Facebook pixel" of Meta Platforms Inc (USA). This allows users' behaviour to be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help to optimise advertising measures.
LinkedIn Insight Conversion Tracking
We use the LinkedIn Insight Conversion Tool of LinkedIn Inc. (USA), which allows us to obtain information about the use of our website and to present advertising content that is tailored to your interests on other websites. For this purpose, a cookie with a validity of 120 days is set in your browser, which enables LinkedIn to recognise you when you visit a website. LinkedIn uses this data to create anonymous ad activity reports and information about how you interact with our website.
You can deactivate the LinkedIn Insight Conversion Tool as well as interest-based advertising by opting out under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
For more information on LinkedIn privacy, please visit: https://www.linkedin.com/legal/privacy-policy
Twitter Conversion Tracking
We use the universal website tag from Twitter Inc. (Ireland) which allows us to obtain information about how visitors use our website and to use this information to present personalised Twitter advertising content tailored to their interests. For this purpose, a cookie is set in your browser that allows Twitter to recognise you when you visit a website. It also enables us to identify users who used their mobile device to view our ads on Twitter and later visit our website on a desktop computer. Twitter's Conversion Tracking allows us to assign conversions such as link clicks, retweets or "likes". The collected data is always in aggregated and anonymous form.
You can deactivate Twitter's interest-based advertising via several opt-out functions, which are explained here: https://help.twitter.com/de/safety-and-security/privacy-controls-for-tailored-ads.
We have agreed to the terms of Twitter's conversion tracking programme: https://legal.twitter.com/ads-terms/us.html#twitterconversiontrackingprogramt%26cs.
You can find more information on data protection on Twitter at https://twitter.com/de/privacy.
Google Ads & Conversion Tracking
With the help of this technology, Google and B. Braun are notified when a user clicks on an advertisement and is redirected to our websites. The information obtained in this context is exclusively used for statistical analysis to optimise the ads. We do not receive any information that personally identifies a user. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website that was tagged with a conversion tag. These statistics allow us to understand which search terms led to the most frequent clicks on our ads and which advertisements resulted in a user filling out the contact form.
You can prevent the storage of the cookie required for these technologies, for example, via the settings of your browser. In this case, your visit will not be included in the user statistics.
However, B. Braun and Google still receive statistical information about how many users have visited this website and when. If you do not wish to be included in these statistics, you can prevent this by using additional programs for your browser (e.g. the Ghostery add-on).
The data collected by Funnelytics are IP address (captured and stored in anonymised form only), device type (unique device identifiers), browser information and geographical location (country only).
21. Social Media
B. Braun maintains its own sites on various social networks in order to enable an exchange with interested users or customers and to be able to inform these groups about the B. Braun product portfolio. B. Braun does not process any user data in social networks itself, and can only analyse and use the data that have been anonymised by Facebook, for example. In the process, user data may be transferred to countries outside the European Union.. Furthermore, the user data collected is processed for marketing purposes, for example to define target groups and then display targeted advertising material to them on the respective social media platform. To make this possible, the social network/the relevant provider of the social network frequently stores cookies that contain the users’ online behaviour, interests and similar.. User profiles on the respective platforms can also contain data that is stored irrespective of the end device. The legal basis for this kind of processing is the legitimate interest of B. Braun in functional and stable communication with users via the respective online presence.
The social media providers may request your consent to the relevant data processing. In this case, the legal basis for the data processing would be that specific consent. As a data subject affected by the processing, you can assert various rights against the controller (more information see section 25). Please note, however, that as a basic principle, exercising these rights as a data subject makes the most sense if you do so directly with the platform provider. As a general rule, only the platform providers have direct access to the processed data and are the only ones who can take appropriate measures. Of course, we are at your disposal if you have any further questions in this regard.
In order to provide you with as much relevant information as possible regarding data processing in social networks, we also refer to the privacy policies of the individual platform providers:
22. (Social Media) Plugins
Third-party content may be used within the B. Braun website (so-called plugins). These can appear in the form of YouTube videos, RSS feeds or graphics of other websites or also by social media buttons such as the Facebook share button.
If you are on a B. Braun website, on which content of third-parties is integrated, a connection will be set up with the respective social network under certain circumstances. This means that the content of the buttons can be transferred to your browser and integrated into the website by it. This means that the respective provider always receives the information that you have opened the B. Braun website. It is irrelevant whether you are a member of a social network or not logged into such a network. Furthermore, irrespective of whether you actually interact with the embedded content, information is automatically collected by the social network. The following data may be transferred hereby: IP address, browser information and operating systems, screen resolution, installed browser plugins (e.g. Adobe Flash Player), origin of visitors (if you followed a link) and the URL of the current website.
If you are logged into one of the social networks while using the B. Braun website, the information about your visit to the website will be linked to your member data and stored. If you are a member of a social network and do not wish this data to be transferred, you must log out of the social network before visiting the B. Braun website.
Plugins of the social network Facebook, provider Meta Platforms Inc. (USA) are integrated on our websites. You can recognise the Facebook plugins by the Facebook logo on our website. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/.
When you visit our websites, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our website with your IP address. Facebook can hereby allocate the visit to our website to your user account. . We would like to point out that we, as the provider of the websites, have no knowledge of the content of the transferred data or the processing thereof by Facebook.
If you do not wish Facebook to associate the visit to our websites with your Facebook user account, please log out of your Facebook user account.
Functions of the Twitter service are integrated onto our websites. These functions are offered by Twitter Inc (USA). By using Twitter and the "Re-Tweet" function, the websites you visited are linked to your Twitter account and announced to other users. In this context, data is also transferred to Twitter. We would like to point out that we as the provider of the websites neither receive any knowledge of the content of the transferred data nor their use by Twitter.
You can change your Twitter privacy settings in your account settings at http://twitter.com/account/settings.
Our website uses functions of the LinkedIn network. The provider is LinkedIn Inc (USA). A connection to servers of LinkedIn will be set up with each call of one of our websites, which contains functions of LinkedIn.. LinkedIn is informed that you have visited our website with your IP address. If you click the LinkedIn "Recommend" button and are logged into your LinkedIn account, it is possible for LinkedIn to link your visit to our website with you and your user account. We would like to point out that we as the provider of the website neither have any knowledge of the content of the transferred data nor their use by LinkedIn.
Our website uses functions of the XING network. The provider is XING AG (Germany Each time you access one of our pages that contains XING functions, a connection is established to servers of XING. To our knowledge, processing of personal data does not take place in this process. In particular, no IP addresses are stored, nor is user behaviour analysed.
Our website uses plugins from the YouTube site operated by Google. The operator of the websites is YouTube LLC (USA). When you visit one of our websites fitted with a YouTube plugin, a connection to the YouTube servers is established. It communicates to the Youtube server which of our websites you visited. If you are logged into your YouTube account, you enable YouTube to link your behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
In order to show you interactive maps directly on the website and to make the comfortable use of the map function possible, we integrate Google Maps from the service provider Google LLC (USA) on our websites. In order to use these services, the IP address of the user is transferred to Google. The IP address is required for the display of this content, but is only used to deliver the content. Your location data will not be collected by Google without your consent (usually part of your device settings).
We use the sharing button of the messenger service WhatsApp from the provider Meta Platforms Inc (USA). The sharing buttons allow you to share a post or website using WhatsApp. The WhatsApp sharing button is merely a link to the provider WhatsApp. Therefore, no data flows to WhatsApp simply by calling up our website.
If you actively use the WhatsApp button, a direct connection is established between your browser and the WhatsApp server via the plugin. WhatsApp thereby receives the information that you have visited our website with your IP address. If you click on the WhatsApp button while you are logged into your WhatsApp account, you can share the content of our website via your WhatsApp profile. This enables WhatsApp to link your visit to our website with your WhatsApp profile. We would like to point out that we, as the provider of the website, neither have any knowledge of the content of the transferred data, nor their use by WhatsApp. If you do not want WhatsApp to be able to associate your visit to our website with your WhatsApp profile, please log out of your WhatsApp account beforehand.
23. Your rights as a data subject
You have the right to the following at any time:
- free information on the personal data, their origin and recipients and the purpose of processing,
- restriction of processing,
- erasure of these data,
- receipt of your personal data in a structured, commonly used and machine-readable format (right to data portability),
- withdrawal of your consent to the processing of your personal data,
- lodging a complaint with the competent supervisory authority (contact details see section 28).
Objection to the processing of your data based on legitimate interests
You also have the right to object to the processing of your personal data at any time if this is carried out by B. Braun on the basis of a legitimate interest (pursuant to Art. 6 (1) lit. f GDPR). As a result, the processing of your data will be halted, unless B. Braun can show that there are statutory provisions concerning this or that it has grounds to continue processing the data based on legitimate interests. This is the case, for example, if data is still required in order to be able to assert legal claims where applicable.
Objection to processing for direct marketing purposes
You can object to the processing of your personal data for the purposes of advertising and data analysis at any time ("advertising objection").
On this point and for further questions concerning personal data, you can contact us here or using the contact information under section “Your contacts for data protection matters.” Upon request, we will inform you in writing if and which personal information we process about you, in accordance with applicable law.
24. Your contactsfor data proacy matters
If you have any questions regarding the processing of your personal data, you can contact our data protection officer and their team directly. They are also available for information requests, inquiries or complaints:
Data Protection Officer
B. Braun SE
To contact us, please send an email to firstname.lastname@example.org
If you wish to exercise your right to lodge a complaint with the supervisory authority, please contact the following address:
The Hessian Data Protection Commissioner
25. Accessibility of the privacy policies