Information on data protection on our website
Thank you for visiting our website and for your interest in our company. We take the greatest possible care when handling your data. The following information provides a compact and simple overview of what happens to your data when you visit our website. Your data will be processed in accordance with the relevant statutory provisions.
Responsible body
The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU member states as well as other data protection regulations is the:
Braun Animal Health Center in Lahr GmbH
Johann-Sebastian-Bach-Str. 1
77933 Lahr
Contact for questions about data protection
If you have any questions about data protection, please contact us at info@tgz-lahr.de
Validity of and changes to the privacy policy
This privacy policy is valid and is dated 23.04.2025.
Due to the further development of our website or the implementation of new technologies and features, it may become necessary to amend this privacy policy. We reserve the right to make such changes at any time.
Data protection rights and information on the right to object
Your rights to information, rectification, restriction, erasure, data portability and complaint to the competent supervisory authority
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR and the right to data portability under Art. 20 GDPR.
The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure.
You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). A list of supervisory authorities (for the non-public sector) with addresses can be found at https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Information on the right to object pursuant to Art. 21 GDPR
Individual right to object and recipient of the request
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
The objection can be made informally with the subject “Objection”, stating your name, address or other identifying features, to the contact details provided in the legal notice.
General information
Routine deletion of data
We generally only store your data for the period of time required to achieve the purpose of storage or if this is stipulated by the European legislator or another legislator in laws or regulations to which we are subject.
In this respect, Germany has a retention obligation for 6 years in accordance with Section 257 (1) HGB (in particular trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers). In accordance with Section 147 (1), (3) of the German Fiscal Code, 10 years for books, records, management reports, accounting vouchers, documents relevant for taxation and 6 years in particular for commercial and business letters.
If the storage purpose no longer applies or if a legally prescribed storage period expires, your personal data will be routinely deleted in accordance with the statutory provisions.
Please also note the specific information on individual storage and deletion periods for the respective data processing in this privacy policy.
Data security
We use technical and organizational security measures to protect your personal data against misuse, loss, destruction or access by unauthorized persons. The security measures taken (such as encryption procedures, firewall and virus protection, back-up and recovery procedures) correspond to the current state of the art and are updated on an ongoing basis.
Nevertheless, we would like to point out that there is always a certain residual risk when communicating on the Internet, which depends on the respective user behavior of the user and over which we therefore have no influence.
Order processing by external service providers
Tools and plug-ins from third-party providers are used on our website as part of order processing. A contract for order processing has been duly concluded with all processors used, which ensures an appropriate level of data protection.
Further information on data processing by the processors used can be found in the respective section of the third-party tool in this privacy policy.
Data transfer to third countries
When you visit our website, personal data may be transferred to servers in third countries outside the European Union through the integration of individual plug-ins and tools. Details of any such data transfers, including the applicable legal basis, can be found in the section of this privacy policy relating to the respective third-party tool.
Scope of application (external links)
This data protection information applies exclusively to visits to our own website.
External third-party websites are linked at some points on our website. These websites are subject to the liability of the respective operators. If you notice that links on the websites refer to Internet pages whose content violates applicable law, please notify us via the e-mail address provided in the legal notice.
We will then immediately remove these links from our website. The providers assume no liability for the topicality, correctness, completeness or quality of the information provided.
Hosting
Use of an external hoster
We use an external service provider to host our website.
Provider:
WebExperten Online-Marketing GmbH
Karmarschstrasse 50
30159 Hanover
Germany
Intended use: Reliable accessibility and presentation of our website.
Legal basis:
The use of our hoster is based on our legitimate interest in the most reliable accessibility and presentation of our website, in accordance with Art. 6 para. 1 lit. f GDPR.
Objection / Opt-Out:
Information on your right to object in accordance with Art. 21 GDPR can be found in the data protection rights section above.
Order processing:
We have concluded an order processing contract (AVV) with our hoster, which guarantees that the personal data of our website visitors will only be processed in accordance with our instructions and in compliance with the GDPR.
SSL or TLS encryption:
To protect the security of your data during transmission, we use the SSL or TLS encryption method via HTTPS.
Server log files:
When you access our website, technical data about your visit is automatically recorded. This information (so-called server log files) includes, for example: the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.
Intended use:
Ensuring a problem-free connection to the website, smooth use of our website and guaranteeing system security and stability. We also reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
Legal basis:
The legal basis for the collection of server log files is our legitimate interest in an error-free and secure presentation of our website in accordance with Art. 6 para. 1 lit. f GDPR.
Provision of your data voluntary or mandatory:
The provision of server log files is neither legally nor contractually required. However, without the collection of log files, the functionality of our website cannot be guaranteed.
Storage duration:
The log data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.
Cookies
Cookies are pieces of information that are transferred from our web server or third-party web servers to the user’s web browser and stored there for later retrieval. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
If you consent to this, cookies from third-party companies may also be stored on your end device (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. range measurement and evaluation of the usage behavior of our website, etc.).
Cookies can be used for different purposes. A distinction is made between technically necessary cookies, without which the website would not function (e.g. session cookies or the cookie that stores your consent preferences). And technically unnecessary cookies, which help the website operator to evaluate user behavior on the website or which are used for marketing purposes.
Technically necessary cookies are stored on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR and §25 para. 2 TTDSG. The website operator has a legitimate interest in the use of cookies for the technically error-free and optimized provision of its online presence.
Your explicit consent is required for the use of cookies that are not technically necessary. The legal basis for this processing in these cases is therefore your consent in accordance with Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. You can withdraw your consent at any time.
You have the option of presetting your browser to be privacy-friendly. These settings allow you, for example, to exclude the acceptance of cookies for certain cases or in general and to automatically delete all cookies set during the browser session when the browser is closed. If cookies are generally deactivated, some functions of the website may not be displayed correctly.
Insofar as cookies are used by third-party providers or for non-technically necessary purposes, you will find the individual details about this in this data protection information.
Borlabs Cookie
Provider: Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany.
Intended use:
Borlabs Cookie is used to obtain consent to the storage of certain cookies and the use of certain third-party tools from users of the website and to document them in accordance with data protection regulations.
Type of data processing:
When you access the website for the first time, you will be asked to enter your cookie preferences in the Borlabs Consent Manager. A cookie is then set in your browser, which saves your cookie preferences for further surfing on our site. No personal data will be passed on to Borlabs.
Legal basis:
Obtaining the legally required consent for the use of cookies in accordance with Art. 6 para. 1 lit. c GDPR and §25 para. 2 no. 2 TTDSG.
Provision of your data voluntary or mandatory:
Obtaining your cookie preferences is required by law.
Storage duration:
The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies.
No order processing:
No personal data is transmitted to Borlabs. Borlabs is therefore not a processor according to its own information. For further information: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Information on data protection at the third-party provider: https://de.borlabs.io/datenschutz/.
Data processing on the website
Contact requests by e-mail and telephone
Intended use: Processing of the request.
Type of data processing:
Inquiries by e-mail or telephone, including all resulting personal data, are stored and processed for the purpose of processing. The data will not be passed on without your consent.
Legal basis:
The processing of your request is based on our legitimate interest in pursuing our business interests in accordance with Art. 6 para. 1 lit. f GDPR. If you contact us to request an offer, the processing is carried out to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR.
Objection / Opt-Out:
Information on your right to object in accordance with Art. 21 GDPR can be found in the data protection rights section above.
Provision of your data voluntary or mandatory:
The provision of your data is neither legally nor contractually required. However, it is not possible to process your request without this information.
Storage duration:
Your data will be deleted no later than 6 months after the request has been processed. If there is a contractual relationship, we are subject to the statutory retention periods and delete your data after six or ten years.
Use of a CRM system:
The personal data resulting from your request may be stored in our customer relationship management system (“CRM system”). Further information on the CRM system used can be found in the section on third-party tools.
Newsletter mailing
Intended use: Sending a newsletter for marketing purposes.
Type of data processing:
We offer a newsletter on our website. If you decide to subscribe, your data will only be used to send you the subscribed newsletter by e-mail and, if you have additionally consented to this, to evaluate how you use the newsletter and any content linked to it. To receive the newsletter, you are only required to provide a valid e-mail address. All other information requested is voluntary.
Legal basis:
The processing is based on your consent to receive the newsletter in accordance with Art. 6 para. 1 lit. a GDPR. This is obtained during the newsletter registration process.
Objection / Opt-Out:
You can revoke your consent to receive the newsletter and the storage of your data at any time. There is a corresponding link in every newsletter e-mail. You can also revoke your consent using the other contact options provided on the website.
Provision of your data voluntary or mandatory:
The provision of your data is voluntary and based on your consent. However, it is not possible to receive our newsletter without your consent.
Storage duration:
Your data will only be processed in this context as long as we have your consent to do so.
Use of a newsletter tool:
To ensure efficient newsletter distribution, we use the external newsletter tool of a third-party provider. Further information on the newsletter tool used can be found in the section on third-party tools.
Tools from third-party providers
klaviyo
Provider: klaviyo – Klaviyo, Inc, 125 Summer Street, Floor 6, Boston, Massachusetts, 02110, USA.
Intended use: Efficient newsletter e-mail marketing.
Type of data processing:
We offer a newsletter that informs you about news. Registration for our newsletter is of course voluntary. As part of your registration, we and our service provider klaviyo, which is used to send the newsletter, process the data you provide. The only mandatory information is your e-mail address; all other information is voluntary. Registration takes place via the so-called double opt-in procedure. klaviyo offers us the opportunity to analyze our newsletter campaigns. For this purpose, so-called web beacons are integrated into the e-mails, which establish a connection to the klaviyo servers when the e-mail is opened and transmit technical information (e.g. time of access, IP address, browser type and operating system). These servers may be located in the USA.
Legal basis:
Receiving our newsletter requires your consent. This is requested when you register for the newsletter. The legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or device fingerprinting (access to information on your terminal device) within the meaning of the TDDDG. This consent can be revoked at any time.
Objection / Opt-Out:
Information on your right to object in accordance with Art. 21 GDPR can be found in the section on data subject rights. You can unsubscribe from our newsletter at any time. There is a link in the footer of every newsletter email to unsubscribe.
Provision of your data voluntary or mandatory:
The provision of your data is voluntary. However, we cannot send you our newsletter without your consent.
Storage duration:
Data processing will continue until you withdraw your consent and unsubscribe from our newsletter.
Information on data protection at the third-party provider:
Privacy center: https://www.klaviyo.com/legal/privacy
Information on email marketing: https://www.klaviyo.com/email-marketing
Third country transfer:
Processing also takes place outside the EU, namely in the USA. There are guarantees in the form of concluded standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.
In addition, the company is a participant in the data protection agreement between the EU and the USA, the so-called “EU-US Data Privacy Frameworks (DPF)”, and is certified in this context. By participating in the DPF, the company undertakes to guarantee a level of data protection comparable to the GDPR.
Data Processing Addendum / Order processing:
By accepting the klaviyo terms of use, we have also concluded an order processing agreement (AVV) / Data Processing Addendum (DPA), which guarantees that the personal data of our website visitors will only be processed in accordance with our instructions and in compliance with the GDPR.
Google Analytics
Provider: Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Intended use:
Analysis of the behaviour of website visitors by evaluating, for example, page views, length of stay, operating system, etc., in order to optimize the website.
Type of processing:
Google Analytics helps us to analyze the data traffic on our website. For this to work, a tracking code provided by Google Analytics and integrated via the Google Tag Manager is implemented on our website. If you consent to tracking by Google Analytics, a cookie is placed on your device, which gives your device a unique identifier (tracking ID). This cookie is linked to Google Analytics. It records the surfing behavior of our website visitors and the resulting statistics may provide information about which target groups feel addressed by our website.
Legal basis:
The use of Google Analytics requires your consent. This was requested via our Cookie Consent Tool. The legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. This consent can be revoked at any time.
Objection / Opt-Out:
Information on your right to object in accordance with Art. 21 GDPR can be found in the section on data subjects’ rights. In the footer area of the website, you have the option of re-submitting your cookie preferences. Another way to opt out is to manually delete the website cookies in your browser settings or to follow the opt-out link below. Google also provides a browser plug-in for permanent opt-out: https://tools.google.com/dlpage/gaoptout?hl=de.
Provision of your data voluntary or mandatory:
The provision of your data is voluntary.
Information on data protection at the third-party provider:
Data protection information for Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de.
Notes on how Google Analytics works: https://marketingplatform.google.com/about/analytics/terms/de/.
Google’s privacy policy: https://policies.google.com/privacy.
Third country transfer:
Processing also takes place outside the EU, namely in the USA. There are guarantees in the form of concluded standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. The standard contractual clauses and further information on the GDPR and Google can be viewed here: https://privacy.google.com/businesses/controllerterms/mccs/.
In addition, the company is a participant in the data protection agreement between the EU and the USA, the so-called “EU-US Data Privacy Frameworks (DPF)”, and is certified in this context. By participating in the DPF, the company undertakes to guarantee a level of data protection comparable to the GDPR.
IP anonymization activated:
For data protection reasons, we have activated the IP anonymization function. This means that no complete IP addresses of visitors within the European Economic Area (EEA) are stored and transmitted unabridged to the USA. However, the transmission of unabridged IP addresses to servers in the USA cannot be completely ruled out and may occur in exceptional cases.
Storage period 14 months:
We have configured Google Analytics so that the stored data at user and event level is automatically deleted after 14 months. You can find more information on the storage period of the tool here:
https://support.google.com/analytics/answer/7667196?hl=de.
Google Ads Data Processing Terms:
We have concluded a direct customer contract with Google for the use of Google Analytics by accepting the “Data Processing Addendum” in the Google Analytics settings. This is to be regarded as a Data Processing Addendum (DPA).
Google Maps
Provider: Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Intended use:Optimization of the findability of our website.
Type of data processing:
We have integrated the online map service Google Maps on our website. This helps interested parties to find their way around and helps us to be found more easily in Google searches. If you agree to the display of Google Maps on our website, data will be transmitted to Google and at least one cookie will be set. This cookie then stores data about your user behavior, which Google uses to improve its own services and, if necessary, to display individual, personalized advertising.
Legal basis:
The display of Google Maps content requires your consent. This was requested via our Cookie Consent Tool. The legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG.
Objection / Opt-Out:
Information on your right to object in accordance with Art. 21 GDPR can be found in the section on data subjects’ rights. In the footer area of the website, you have the option of changing your cookie preferences. Another way to opt out is to manually delete the website cookies in your browser settings.
Provision of your data voluntary or mandatory:
The provision of your data is voluntary.
Storage duration:
According to Google, the storage period of the NID cookie set by Google Maps in your browser is 6 months. We cannot provide any guarantee for this information, as an adjustment of the storage period of Google cookies can never be ruled out.
Data protection information for third-party providers:
Google’s privacy policy: https://policies.google.com/privacy?hl=de.
Third country transfer:
Processing also takes place outside the EU, namely in the USA. There are guarantees in the form of concluded standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. Google’s standard contractual clauses can be viewed here:
https://business.safety.google/controllerterms/.
In addition, the company is a participant in the data protection agreement between the EU and the USA, the so-called “EU-US Data Privacy Frameworks (DPF)”, and is certified in this context. By participating in the DPF, the company undertakes to guarantee a level of data protection comparable to the GDPR.
Status: August 2025