Privacy­ Policy

BEGA.com Privacy Policy in accordance with the GDPR

The protection and security of your personal data or device data that can be attributed to you (together referred to as “data”) are of the utmost importance to us. Accordingly we observe the statutory regulations in order to provide the best possible protection for your data. Below we would like to inform you about the type, scope and purpose of our data processing:

BEGA Gantenbrink-Leuchten KG (hereinafter “BEGA”) processes personal data as defined by Art. 4 (1) of the General Data Protection Regulation (GDPR) exclusively as covered by the GDPR and, as far as applicable, pursuant to Art. 25 of the German Telecommunications and Telemedia Data Protection Act (TTDSG) solely within the scope of these provisions.

This privacy policy provides information in accordance with Art. 13 GDPR.


1. Contact details of the Controller (Art. 13 (1)(a) GDPR)

Responsibility for operating the website and thus for handling personal data lies with

BEGA Gantenbrink-Leuchten KG P.O. Box 3160 D-58689 Menden

2. Contact details of the Data Protection Officer (Art. 13 (1)(b) GDPR)

The responsible Data Protection Officer at BEGA is:

Mr M. Helling c/o BEGA Gantenbrink-Leuchten KG P.O. Box 3160 D-58689 Menden

[email protected]

3. General Information

a. On its website, BEGA offers a public area and a private (access-protected) area (“user area”), which pose different usage requirements (see the terms and conditions of use). BEGA also offers the option of acquiring replacements on the website through an online shop module (hereinafter: "Online shop"). Accordingly there are also differences in the processing of personal data.

b. When the public area of the website is used, the user’s automatically anonymised IP address is saved. As a result of the anonymisation, it is impossible to identify the anonymised user and tracking their movement on the website does not allow for any conclusions to be drawn about a specific user.

c. The user is required to register or log in with an existing BEGA ID in order to use the access-protected user area. This also applies for ordering in the BEGA online shop.

4. Types of personal data

The data listed below are data defined by Art. 4 (1) GDPR.

a. Visiting the website/free downloads

With every website visit and download of documents in the freely accessible area of the website, the respective user’s log files as listed below are recorded automatically:

  • Information about the browser type and version used
  • The user’s operating system
  • The address of the preceding website visited
  • The user’s anonymised IP address
  • Every successful log-in to the user’s account
  • Date and time of access
  • E-mail address (solely within the web app).

In addition, the following log files are recorded within the context of use of the access-protected area:

  • (Un)successful log-in
  • Change of password by user
  • Error during registration
  • Change of user data
  • Error during deletion process for user
  • Error when re-sending the activation e-mail
  • (Un)successful activation
  • Error when sending the “forgotten password” e-mail
  • Data protection or terms and conditions of use were accepted by user
  • Error when sending e-mail

b. BEGA ID

BEGA processes the following data for receipt of the BEGA ID:

  • Title
  • Title,
  • First name
  • Surname
  • Branch
  • Company
  • Address
  • House number
  • Post code
  • Town
  • Country
  • Phone number
  • Fax number
  • Mobile phone number
  • Website

c. Contact by email

If the user opts to contact BEGA by sending an e-mail to [email protected], the e-mail address, all data technically associated with the e-mail and the contents of the e-mail will be saved. In particular, the e-mail address can be considered personal data within the meaning of 4 (1) GDPR insofar as it is connected with a specific person, as may the e-mail contents or parts thereof.

d. Use of the contact form

BEGA processes the data supplied by the user via the contact form:

  • Company
  • Branch
  • First name
  • Surname
  • Address
  • House number
  • Post code
  • Town
  • Country
  • Phone number
  • Message contents

e. Application documents

Application documents may also be submitted by e-mail (see the “Jobs” page). Data which are processed within this context are personal data as defined by Art. 4 (1) GDPR.

f. Online shop

If the user orders replacements in the online shop, the following personal data are collected

  • Billing address
    • Title
    • Title,
    • First name
    • Surname
    • Company
    • Street:,
    • House number
    • Post code
    • Town
    • Country
  • Delivery address
    • Title
    • Title,
    • First name
    • Surname
    • Company
    • Street:,
    • House number
    • Post code
    • Town
    • Country
  • Payment data (depending on the selected payment method)
    • Credit card holder, credit card number, expiry date

g. Newsletter

In order to distribute the newsletter, BEGA processes the following data concerning the user, which could constitute personal data

  • E-mail address
  • First name
  • Surname
  • IP address of the accessing computer
  • Date and time of registration and confirmation (with double opt-in procedure)
  • Website performance indicators, known as Key Performance Indicators (KPIs) to measure the success of website use, for instance:
    • Number of openings
    • Link clicks
    • Logouts

5. Purposes of the processing of the personal data (Art. 13 (1)(c) GDPR)

a. Visiting the website/free downloads

The log files are processed in order to ensure the functionality of the website. The data are also used in order to optimise the website and ensure the security of the information technology systems. No analysis of the data is performed for marketing purposes.

b. BEGA ID

The data entered by the user upon registration to receive the BEGA ID are used solely for the purpose of performing the functions offered as part of BEGA’s telemedia and for carrying out the contract of use. As such, the data are used solely for internal customer administration purposes and for processing enquiries from the registered user.

If users log in to their user account using their BEGA ID, they can create what are known as project lists. These are then saved in a BEGA database and can be accessed as long as the user account exists.

c. Making contact

The data entered by the user when making contact are used solely for the purpose of processing the user’s request.

d. Application documents

The data are processed in order to determine the applicant’s qualifications and suitability for the BEGA vacancy to be filled.

e. Online shop

The data provided by the user during the order process are required in order to manage the order and are processed by BEGA for this purpose. Compulsory information for order management is marked separately, additional information is voluntary

In order to prevent the creation of duplicate data sets, BEGA reviews whether the data received for guest orders can be attributed to an existing customer account.

f. Newsletter

Data processing is carried out in order to provide the user with interesting current offers by e-mail. The storage of IP address, time of registration and confirmation serves as proof of registration and to resolve a potential misuse of personal data if necessary.

6. Recipients/third parties/transfer to a third country (Art. 13 (1)(e) and (f) GDPR)

Alongside BEGA, recipients of the data may be third parties which process data on BEGA’s behalf or which have access to the data as part of their service provision to BEGA (e.g. IT service providers). There is a data processing agreement with these third parties pursuant to Art. 28 GDPR.

When BEGA is contracted by users to provide services or to supply products, it is necessary under certain circumstances, within the context of implementing the contract, to forward personal data such as name and address to companies which BEGA engages to provide a service or deliver a product. No other transfer of user data to third parties (Art. 4 (10) GDPR) will take place unless the user gives express consent.

The user has the option of downloading project lists within the user account (cf. terms and conditions of use). In this case, the user has the option to choose whether a sales partner pre-selected by BEGA and responsible for the site where the project is being conducted will receive the project list data and the user’s contact data (opt-in). Such an arrangement is not made without the user’s active choice.

All data are saved on servers or computers within the European Union; they are not transferred to a third country, nor are there any plans to do so.

The forwarding of personal data to governmental institutions and authorities takes place only within the scope of statutory regulations.

7. Cookies and analytics tools

a. Session ID cookies

Public area:

In the public area of the website, the user can create what is known as a watch list. BEGA uses so-called session ID cookies to save this list. Cookies are small text files which save the settings of websites, e.g. in the user’s web browser, in the course of using the website. The cookies are used to save user-related information and, amongst other things, enable the user to create watch lists (cf. terms and conditions of use). The session ID cookies used by BEGA are saved solely for the current session in the user’s web browser and are deleted automatically when the browser is closed.

Access-protected area

BEGA also uses session ID cookies within the access-protected area. As soon as the user has logged in to the access-protected area, the session ID cookies save the link to the website that was open at the time of the log-in, the language selected at the time of the log-in and the information about whether the privacy policy is to be displayed to the user. In addition, the remote user ID, user ID and e-mail address are recorded as integral components of the BEGA ID. The session ID cookies used by BEGA are saved solely for the current session in the user’s web browser and are deleted automatically when the browser is closed.

Use of the access-protected user area requires the user to allow the session ID cookies used by BEGA and to permit the saving of data by sessionStorage.

b. Matomo

The Matomo open-source analytics tool, which saves a cookie on the user’s hard disk for seven days, is used for the processing of statistical data concerning the use of this website (public and access-protected area), e.g. how often which products are placed on watch lists. No personal data are collected when the statistical data are transferred. All data processed by Matomo are stored on the BEGA servers in the Netherlands. The user’s IP address is truncated before it is stored in order to prevent any conclusions being drawn about the natural person. BEGA uses Matomo to analyse usage behaviour solely for internal purposes and to improve its range of products and services. This involves recording the user’s complete navigation path on the website, therefore including details about which sections/products are accessed during use of the website, scrolling behaviour, the playing of videos, time, operating system, duration of use, links, exit and anonymised IP address.

In the case of users who have activated a “Do not track” function in their browser, no web tracking is performed with Matomo. Moreover, it is possible to opt out of the anonymous usage data analysis by Matomo at the end of this page.

8. Social media

a. YouTube

BEGA operates a video channel on the YouTube website, which can be accessed from www.bega.com via a link. The YouTube website operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”).

When the user clicks on the link, a connection is established to the YouTube servers. As part of this process, information is passed on to the YouTube server about which pages of the www.bega.com website the user has visited.

Further information about the handling of user data can be found in the YouTube privacy policy at: https://policies.google.com/privacy.

b. Facebook

Links are also used which take the user to the Facebook social network, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter “Facebook”).

When the user clicks on the Facebook link on www.bega.com, the user is taken to the BEGA Facebook profile and information is passed on to the Facebook server about which BEGA web pages the user has visited. If, at this point in time, the user is logged in as a Facebook member, Facebook will associate this information with the user’s personal Facebook account.

If plug-in functions are used (e.g. clicking on the “Like” button, leaving a comment), this information is also associated with the Facebook account.

More detailed information about how Facebook collects and uses data, user rights in this regard and ways of protecting one’s privacy can be found in Facebook’s data policy; https://www.facebook.com/about/privacy/update?ref=old_policy

c. LinkedIn

BEGA operates a Company Page on the LinkedIn network. The supplier is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”). If the user clicks on the LinkedIn link on www.bega.com, the user is taken to the Company Page maintained by BEGA.

If the user clicks on the LinkedIn “Recommend” button and is simultaneously logged in to his or her LinkedIn account, it is possible for LinkedIn to associate the visit to the BEGA website with the user’s account. Please note that BEGA, as the supplier of the pages, has no knowledge about the content of the transferred data or usage of these data by LinkedIn.

Further information can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

d. Pinterest

There are also links to the Pinterest social network, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (hereinafter “Pinterest”). If the user clicks on the link on www.bega.com, the user is taken to the Pinterest page operated by BEGA.

Further information about the purpose, scope, further processing and use of the data by Pinterest as well as the user’s rights and ways of protecting one’s privacy can be found in Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy

e. XING

BEGA uses XING network functions. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany (hereinafter “Xing”). Every time a user visits one of our pages which contains XING functions, a connection to XING servers is established. To our knowledge, no personal data are saved during this process.

Further information about data protection and the XING share button can be found in the XING privacy policy at https://www.xing.com/app/share?op=data_protection

f. houzz

There are also links on www.bega.com which lead to the houzz platform, which is operated by Houzz Inc., 285 Hamilton Avenue, Palo Alto, CA 94301, USA (hereinafter “houzz”). If the user clicks on the link on www.bega.com, the user is taken to the houzz information page about BEGA.

Further information about the purpose, scope, further processing and use of the data by houzz as well as the user’s rights and ways of protecting one’s privacy can be found in the houzz privacy policy: https://www.houzz.de/privacyPolicy

9. Newsletter

BEGA only sends its newsletter about interesting current offers to users who either

  • previously granted their express consent for this purpose, or
  • have already purchased goods from BEGA or used BEGA services and whose e-mail address BEGA received directly from the user. In this case, the newsletter may only contain advertisements for similar goods and services offered by BEGA.

For newsletter registration, BEGA uses the double opt-in procedure. This means that after the user registers, BEGA sends an e-mail to the indicated e-mail address in which the user is requested to confirm that he/she is the owner of the indicated e-mail address and agrees to receive notifications. If the registration is not confirmed within 24 hours, the information is blocked and automatically erased after one month.

The user may revoke his/her consent to receive the newsletter and unsubscribe from the newsletter at any time. Consent may be revoked by clicking on the link provided in each newsletter e-mail or by sending a message to the contact details provided in the imprint.

The user can also consent for BEGA to analyse his/her user behaviour and link this with his/her individual customer profile when sending the newsletter (newsletter tracking). For this analysis, the e-mails that are sent include web beacons or tracking pixels, single pixel images files that are stored on our website. For analysis, BEGA connects the data mentioned above (Clause 4 (f)) and the web beacons with the e-mail address and an individual ID. Links included in the newsletter also contain this ID. The user can object to this tracking at any time by unsubscribing from the newsletter. The information is stored for as long as the user remains subscribed to the newsletter. After the user unsubscribes, we store the data purely for statistical purposes and anonymously.

10. Legal basis for the processing of data (Art. 13 (1)(c) GDPR)

a. Visiting the website/free downloads

The legal basis for the processing of data within the public area using cookies, analytics tools, social media links and log files is Art. 6 (1)(f) GDPR. Our legitimate interest lies in providing a properly functional, user-friendly website.

The legal basis for the processing of data in the access-protected area is Art. 6 (1)(b) GDPR.

b. Making contact via e-mail

The legal basis for the processing of data which are transferred when an e-mail is sent is Art. 6 (1)(f) GDPR if the sender is not yet a customer or is not already in a business relationship with us in some other way. If there is a contractual relationship already or if this is to be set up directly on the sender’s initiative, the legal basis is Art. 6 (1)(b) GDPR.

c. Use of the contact form

The legal basis for the processing of the data provided is Art. 6 (1)(a) GDPR. Before submitting the data you have supplied in the form, you consent to the transfer and processing of your personal data by BEGA for the purpose of processing your enquiry.

d. Submission of application documents

The legal basis for processing and, in particular, for temporarily storing the data provided in the application documents is section 26 of the German Federal Data Protection Act (BDSG).

e. Online shop

The legal basis for the processing of personal data in connection with the use of the online shop is Art. 6 (1) Sentence 1 (b) GDPR.

f. Newsletter

The legal basis for the processing of personal data in connection with newsletter mailing is Art. 6 (1) Sentence 1 (a) GDPR, in particular with regard to newsletter tracking; otherwise, legitimate interest pursuant to Art. 6 (1) Sentence 1 (f) GDPR.

11. Duration of storage (Art. 13 (2)(a) GDPR)

The data will be stored as long as they are necessary in relation to the purposes for which they were collected or until consent that was given is withdrawn, subject in each case to the restrictions of Art. 17 (3) GDPR.

This applies as follows:

  • Log files: are deleted automatically every 14 days.
  • Download: on completion of the download.
  • Transmission of contact form / e-mail: The data are deleted one year after the enquiry has been answered unless there has been further communication on the same topic before this deadline has passed or the data are still required due to a contractual relationship (for the purpose of executing/implementing the contract) or need to be kept for periods defined by law due to statutory storage obligations.
  • Registration details: once the usage relationship has come to an end.
  • Application documents: The data are deleted six months after a rejection has been sent. The documents of any applicant appointed by BEGA are transferred to a personal file.
  • Cookies/analytics tools: see above
  • Online shop: The duration of storage for personal data is determined based on the relevant statutory retention period. After the expiry of this period, the data in question are routinely deleted as long as they are no longer required for contract performance or contract negotiations and/or if BEGA no longer has a legitimate interest in continuing storage.

12. User’s rights (Art. 13 (2)(b) – (e), Art. 7 (3) GDPR)

The user has the right at all times, subject to the legal requirements being satisfied, to information about the personal data concerning him or her that we have saved (Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to erasure of personal data concerning him or her (Art. 17 GDPR).

If the user has exercised his or her right to rectification, erasure or restriction of processing with BEGA, BEGA will communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data in question were disclosed, unless this proves impossible or involves a disproportionate amount of work.

The user also has the right, in respect of consent given (Art. 7, Art. 6 (1) a) GDPR), to withdraw this consent (Art. 7 (3) GDPR). The proper withdrawal of consent does not affect the lawfulness of the collection of data prior to this withdrawal.

In addition, the user has the right, for reasons arising from his or her particular situation, to object (Art. 21 GDPR) at any time to the processing of the personal data concerning him or her on the basis of Art. 6 (1) e) 6 (1) f) GDPR.

The user also has the right, subject to the legal conditions being satisfied, to receive the personal data concerning him or her that he or she has provided to BEGA in a structured, commonly used and machine-readable format (right to data portability, Art. 20 GDPR).

In order to exercise these rights, the user should use the contact details in section 1 or 2.

The user further has the right, subject to the legal conditions being satisfied, to lodge a complaint with a supervisory authority (Art. 77 GDPR).

13. BEGA’s rights

For the reasons listed in the terms and conditions of use, BEGA is entitled to block a user’s right of access to the access-protected area by the deactivation or complete deletion of the user account by an administrator. In the case of blocking, the previously collected data will not be deleted automatically. The user’s right to request the deletion of his or her data is not affected by this. BEGA reserves the right to place the e-mail address of the blocked user on a so-called blacklist, preventing him from re-registering with this e-mail address.