Privacy Policy

1) Introduction and Contact Details of the Controller

1.1
We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data refers to all data by which you can be personally identified.

1.2
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. Sonja Diekmann
BCC E3nablement GmbH
Kirchsteinstraße 6
82377 Penzberg
Germany
Phone: +49 (0)152 554 340 42
Email: s.diekmann@bcc-enablement.org

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1
When you use our website for informational purposes only (i.e., without registering or otherwise transmitting information), we collect only the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary to display the website:

The website visited
Date and time of access
Amount of data sent in bytes
Source/referral from which you accessed the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used for any other purpose. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

2.2
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” string and the lock symbol in your browser.

3) Hosting & Content Delivery Network

For hosting our website and displaying page content, we use a provider that performs its services—either directly or via selected subcontractors—exclusively on servers located within the European Union.

All data collected on this website is processed on these servers.

We have concluded a data processing agreement with the provider to ensure the protection of our visitors’ data and to prohibit unauthorized disclosure to third parties.

4) Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device.

Some cookies are automatically deleted after closing your browser (“session cookies”), while others remain on your device for a longer period and allow the storage of site settings (“persistent cookies”). In the latter case, you can find the storage duration in your browser’s cookie settings overview.

If personal data is processed by individual cookies, processing is carried out in accordance with:

Art. 6(1)(b) GDPR for contract performance,
Art. 6(1)(a) GDPR in the case of consent, or
Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible website functionality and a user-friendly experience.

You can configure your browser to inform you about the use of cookies and to decide individually on their acceptance or to exclude cookies for specific cases or in general.

Please note that disabling cookies may limit the functionality of our website.

5) Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected via a contact form is indicated in the respective form.

This data is stored and used exclusively for the purpose of responding to your inquiry and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your inquiry aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

Your data will be deleted after your request has been fully processed, provided that it can be inferred that the matter has been conclusively resolved and no legal retention obligations exist.

6) Rights of the Data Subject

6.1
Under applicable data protection law, you have the following rights with regard to the processing of your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint (Art. 77 GDPR)

6.2 Right to Object

If we process your personal data based on a balancing of interests and our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future, for reasons arising from your particular situation.

If you exercise your right to object, we will cease processing the affected data. However, further processing may be reserved if we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. If you exercise your right to object, we will cease processing your data for direct marketing purposes.

7) Duration of Storage of Personal Data

The duration of storage of personal data depends on the respective legal basis, the purpose of processing, and—if applicable—statutory retention periods (e.g., commercial and tax retention obligations).

When processing is based on explicit consent in accordance with Art. 6(1)(a) GDPR, the data is stored until you withdraw your consent.

If statutory retention periods apply to data processed based on Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods expire, provided it is no longer required for contract fulfillment or initiation and no legitimate interest in further storage persists.

When processing is based on Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object under Art. 21(1) GDPR, unless compelling legitimate grounds justify continued processing or it serves legal claims.

If personal data is processed for direct marketing purposes, it is stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise stated in this policy, stored personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.