Legal

Privacy

Privacy Policy

Privacy Policy of BBULL Technology GmbH, Ankerstraße 73, 75203 Königsbach-Stein, Germany

BBULL Technology GmbH takes the protection of your personal data seriously and processes such data exclusively in accordance with the legal provisions of the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Personal data is collected on this website only to the extent technically necessary or on the basis of another valid legal ground. Under no circumstances will the data collected be sold or disclosed to third parties for purposes other than those stated in this policy.

The following policy provides an overview of how we ensure this protection and what types of data are collected and for what purposes.

§ 1 Name and contact details of the controller and the company Data Protection Officer

The controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) is BBULL Technology GmbH, Ankerstraße 73, 75203 Königsbach-Stein, Germany, Tel.: +49 (0)7232 4006-0, Fax: +49 (0)7232 4006-25, Email: info@bbull.com.

You can contact our Data Protection Officer, Mr Andreas Lingenfelser, at the address above, marked “For the attention of the Data Protection Officer”, or by email at Datenschutz@bbull.com.

§ 2 Information on the collection of personal data

(1) Below, we explain how we collect personal data when you use our website. Personal data means any information relating to you personally, such as your name, address, email addresses or user behaviour.

(2) If you contact us by email or via a contact form, we will store the information you provide (your email address and, where applicable, your name and telephone number) in order to respond to your questions. The retention period depends on how long the information is needed to process your enquiry, unless longer statutory retention periods apply. We delete the data collected in this context once its storage is no longer necessary, or restrict its processing if statutory retention obligations apply.

(3) If we use contracted service providers for individual functions of our website or wish to use your data for advertising purposes, we will provide detailed information about the relevant processes below. We will also specify the criteria used to determine the retention period.

§ 3 Your rights

You have the following rights vis-à-vis us in relation to your personal data:

  • under Art. 15 GDPR, to request information about the personal data we process concerning you. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged retention period, the existence of rights to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected from you, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details involved;
  • under Art. 16 GDPR, to request the immediate rectification of inaccurate personal data or completion of incomplete personal data stored by us;
  • under Art. 17 GDPR, to request the erasure of personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, complying with a legal obligation, reasons of public interest, or establishing, exercising or defending legal claims;
  • under Art. 18 GDPR, to request restriction of the processing of your personal data if you contest its accuracy, the processing is unlawful but you oppose erasure, we no longer need the data but you require it for establishing, exercising or defending legal claims, or you have objected to the processing under Art. 21 GDPR;
  • under Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
  • under Art. 21 GDPR, to object to the processing of your personal data based on Art. 6(1), first sentence, point (e) or (f) GDPR; this also applies to profiling based on those provisions. Following a justified objection, we will no longer process your data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless processing is necessary for establishing, exercising or defending legal claims;
  • under Art. 7(3) GDPR, to withdraw any consent you have given us at any time. This means that we may no longer continue the data processing based on that consent in the future; and
  • under Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority responsible for your usual place of residence, your place of work or our registered office.

§ 4 Collection of personal data when you visit our website

(1) If you use our website for information purposes only, i.e. without registering or otherwise providing us with information, we collect only the personal data transmitted by your browser to our server. If you wish to view our website, we collect the following data, which is technically necessary to display the website and ensure its stability and security (legal basis: Art. 6(1), first sentence, point (f) GDPR):

• IP address
• Date and time of the request
• Time-zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transmitted in each case
• Website from which the request originates
• Browser
• Operating system and its user interface
• Language and version of the browser software

These log data (server logs) are stored for technical purposes by our hosting service provider, IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, with which we have had a hosting agreement since 2022 (see § 8 for information on data processing by IONOS on our behalf). For security reasons (e.g. to investigate cases of misuse), these log data are generally stored for a maximum of eight weeks; the IP addresses they contain are anonymised. Data is retained beyond this period only where necessary to preserve evidence in an individual case.

(2) We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring convenient use of our website,
  • Evaluating system security and stability, and
  • Other administrative purposes.

Under no circumstances do we use the data collected for the purpose of identifying you personally.

(3) In addition to the data mentioned above, cookies or comparable technologies are stored on your device when you use our website. Cookies are small text files stored on your hard drive and assigned to the browser you use. They enable the party setting the cookie (in this case, us) to receive certain information. Cookies cannot run programs or transmit viruses to your computer. They help make our website more user-friendly and effective overall.

Use of cookies:

a) This website uses the following types of cookies or comparable software, the scope and operation of which are explained below:

• Strictly necessary cookies (session cookies), which are essential for operating the website, particularly for session management and ensuring security (legal basis: § 25(2) no. 2 TDDDG in conjunction with Art. 6(1), first sentence, point (f) GDPR);

• Persistent, non-essential cookies (e.g. functional cookies and, where applicable, analytics and marketing cookies), which are set only with your prior express consent (legal basis: § 25(1) TDDDG in conjunction with Art. 6(1), first sentence, point (a) GDPR).

b) Strictly necessary cookies are automatically deleted at the end of your browser session or when their respective technically determined retention period expires. Non-essential persistent cookies are set only after you have given your consent and are automatically deleted after a specified period, which may vary depending on the cookie. We use the consent management tool “Real Cookie Banner” to obtain, manage and document your consent.
You can delete cookies at any time in your browser’s security settings.

c) You can change or withdraw the consent you have given through Real Cookie Banner at any time with effect for the future (Art. 7(3) GDPR) by reopening the relevant button or link to the cookie settings on our website. Alternatively, you can configure your browser settings to refuse third-party cookies or all cookies, for example. Please note that some functions of this website may not be available if you reject cookies.

(4) In addition, when you visit our website, we use analytics services (WP Statistics) and embedded third-party content (a YouTube video). Further information about the respective tools, their legal basis, retention periods and any consent requirements is provided in §§ 9 and 10.

§ 5 Use of our contact form

(1) If you have any questions, you can contact us using a form provided on our website. A valid email address is required so that we know who submitted the enquiry and can respond to it. Any further information is voluntary.

(2) The processing of data for the purpose of contacting us takes place on the basis of your voluntary consent pursuant to Art. 6(1), first sentence, point (a) GDPR.

(3) The personal data we collect through our contact form is automatically deleted once your enquiry has been dealt with.

§ 6 Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We disclose your personal data to third parties only if:

• You have given your express consent pursuant to Art. 6(1), first sentence, point (a) GDPR,

• Disclosure is necessary for establishing, exercising or defending legal claims pursuant to Art. 6(1), first sentence, point (f) GDPR, and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,

• Disclosure is required by a legal obligation pursuant to Art. 6(1), first sentence, point (c) GDPR, or

• Disclosure is legally permissible and necessary for the performance of contractual relationships with you pursuant to Art. 6(1), first sentence, point (b) GDPR.

§ 7 Objection to or withdrawal of consent for the processing of your data

(1) If you have consented to the processing of your data, you may withdraw that consent at any time. Such withdrawal affects the lawfulness of the processing of your personal data from the time you notify us.

(2) Where we base the processing of your personal data on a balancing of interests pursuant to Art. 6(1), first sentence, point (f) GDPR, you may object to the processing under Art. 21 GDPR. This applies in particular where processing is not necessary for the performance of a contract with you, as explained in the descriptions of the relevant functions above. If you exercise this right to object, we ask you to explain why we should not process your personal data in the manner described. In the event of a justified objection, we will review the circumstances and either cease or adjust the processing or explain the compelling legitimate grounds on which we continue processing.

(3) You may, of course, object to the processing of your personal data for advertising purposes at any time.

(4) You can notify us of your objection using the following contact details: info@bbull.com

§ 8 Web hosting and use of WordPress

We use a self-hosted installation of WordPress to operate our website. The website is hosted on servers operated by our hosting service provider, IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany (hereinafter “IONOS”), with which we have had a hosting agreement since 2022.

IONOS processes personal data on our behalf and in accordance with our instructions under a data processing arrangement pursuant to Art. 28 GDPR. The required data processing agreement (DPA) forms part of our contractual relationship with IONOS.

To the best of our knowledge, the servers used by IONOS on our behalf are located in Germany or within the European Union. Accordingly, no personal data is transferred to a third country within the meaning of Arts. 44 et seq. GDPR in this context, so additional safeguards (e.g. standard contractual clauses under Art. 46 GDPR) are not required.

All data generated in connection with the operation of our website (particularly the log data described in § 4) is processed exclusively on the aforementioned servers. The legal basis for engaging IONOS as our hosting service provider is our legitimate interest in providing a reliable, secure and high-performance website (Art. 6(1), first sentence, point (f) GDPR).

§ 9 Web analytics using WP Statistics

We use the WordPress plugin WP Statistics on our website to analyse user behaviour statistically. WP Statistics runs exclusively locally on the server specified in § 8; the data collected is not transmitted to the provider of WP Statistics or to any other third party.

To compile usage statistics, we process information including website visitors’ IP addresses. These are hashed so that individual persons cannot be identified. The statistical data collected in this way is stored for up to one year and then deleted.

As WP Statistics does not set cookies or store information on or read information from your device in the configuration we use, consent pursuant to § 25(1) TDDDG is not required. The legal basis for using WP Statistics is our legitimate interest in analysing and optimising our website (Art. 6(1), first sentence, point (f) GDPR).

§ 10 Embedding YouTube videos

We embed a video from YouTube on our homepage. The party responsible for processing personal data of users in the European Economic Area in this context is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland (hereinafter “YouTube/Google”).

When you access a page containing an embedded YouTube video, a connection to YouTube/Google servers may be established even before you actively use the video (e.g. press play). Information such as your IP address, device and browser information and, where applicable, cookies may be transmitted. As YouTube/Google also operates servers in the USA and belongs to the Google LLC group (USA), this may involve transferring personal data to a third country (Arts. 44 et seq. GDPR).

The YouTube video is therefore embedded only after you have given your prior express consent through Real Cookie Banner on our website (legal basis: § 25(1) TDDDG in conjunction with Art. 6(1), first sentence, point (a) GDPR). The video will not load without your consent.

You may withdraw consent you have given at any time with effect for the future via Real Cookie Banner (Art. 7(3) GDPR). For further information about data protection when using YouTube/Google, please see the provider’s privacy policy at https://policies.google.com/privacy.

§ 11 Data security

(1) When you visit our website, we use the widely adopted SSL (Secure Socket Layer) protocol with the highest level of encryption supported by your browser. This generally means 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or padlock symbol in your browser’s lower status bar.

(2) We also employ appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction and unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

BBULL Technology GmbH

GDPR Cookie Consent with Real Cookie Banner