Scope of Processing of Personal Data

We collect and use personal data from you as a user of our website and the services offered on it only to the extent necessary to provide a functional website as well as our content and services. The collection and use of your personal data generally only takes place with your consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations.

Legal Basis for Processing Personal Data

• If we obtain your consent for processing, Art. 6 (1) sentence 1 lit. a GDPR serves as the legal basis.

• For data processing necessary to fulfill a contract with you, Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. The same applies to pre-contractual measures.

• If processing is necessary to fulfill a legal obligation, Art. 6 (1) sentence 1 lit. c GDPR applies.

• If vital interests of you or another natural person make processing necessary, Art. 6 (1) sentence 1 lit. d GDPR applies.

• If processing is necessary to protect a legitimate interest of our company or a third party, and your interests or fundamental rights and freedoms do not override that interest, Art. 6 (1) sentence 1 lit. f GDPR applies.

Data Deletion and Storage Period

Your personal data will be deleted as soon as the purpose for data processing no longer applies. If deletion is prevented by legal storage or retention obligations under Art. 17 (3) GDPR, processing will be restricted. In such cases, data will be deleted once the storage obligation expires, unless further storage is required for contract performance.

Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects and processes data from the accessing computer.

Collected data includes:

• Information about the browser type and version used

• Operating system of the computer

• IP address of the computer

• Date and time of access

• URL of the referring website

This data is stored in log files. Processing of your IP address and other technical data is strictly necessary to deliver the website to your device.

Legal basis:

• Art. 6 (1) sentence 1 lit. b GDPR if you are registered on our website.

• Otherwise Art. 6 (1) sentence 1 lit. f GDPR, where our legitimate interest lies in providing the website and ensuring IT security.

Log files are deleted after seven days, unless extended storage is required. In such cases, IP addresses are deleted, anonymized, or aggregated.

Data Protection in the Application Process

We process your personal data if you apply for a job with us, for the purpose of conducting the application process.

• If an employment contract is concluded, your data will be stored for the employment relationship.

• If not, application data will be deleted four months after rejection unless legal interests (e.g., AGG compliance) require longer storage.

Legal basis: Art. 88 GDPR in connection with § 26 (1) BDSG.

Product Information, Newsletters, and Event Invitations

• If you provide us your e-mail in a contractual context, we may send newsletters, press releases, and product information (Art. 6 (1) lit. f GDPR, § 7 (3) UWG).

• You can object at any time at no cost (other than standard transmission costs).

• With consent, we use a Double-Opt-In procedure for newsletters. We store subscription data, confirmation, and IP addresses to prove compliance.

Newsletter provider: MailChimp (The Rocket Science Group LLC, Atlanta, USA).

• MailChimp is EU-US Privacy Shield certified.

• Processing is based on Art. 28 and 45 GDPR.

• We have a data processing agreement with MailChimp.

You can revoke consent or unsubscribe at any time via the link in each newsletter.

Newsletter Tracking

Newsletters contain tracking pixels to record opens and clicks.

• Data is used to optimize newsletters.

• No disclosure to third parties.

• Processing is based on Art. 6 (1) lit. f GDPR.

Registration for Contract Fulfillment

On our website, users can register for certain services by providing personal data such as:

• IP address, date/time of registration

• First name, last name, company, position

• E-mail, address, phone number

Legal basis: Art. 6 (1) lit. b GDPR.

Data is stored as long as necessary for contract fulfillment, warranty obligations, or tax retention periods.

Contact Form and Email Contact

When contacting us via form or email, the following data is stored:

• IP address, date/time

• Name, phone, email

Data is used exclusively for handling your request.

Legal basis:

• Art. 6 (1) lit. f GDPR (legitimate interest in processing inquiries).

• If related to a contract: Art. 6 (1) lit. b GDPR.

Data is deleted once your inquiry is resolved, unless legal obligations require longer retention.

Google Analytics

This website uses Google Analytics (Google LLC, USA).

• Uses cookies for analysis.

• IP anonymization (“anonymizeIp()”) is enabled.

• Data is processed on our behalf by Google.

Opt-out:

• Via browser plugin: http://tools.google.com/dlpage/gaoptout?hl=en

• Via opt-out link on our website (sets an opt-out cookie).

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in analyzing and optimizing the website).

We also use demographic reports in Analytics (age, gender, interests). This can be disabled in Google Ads settings.

Cookies

Our website uses cookies to improve usability, effectiveness, and security.

• Session cookies are stored only until the browser is closed.

• You can disable cookies in your browser.

Cookies requiring consent are processed on the basis of Art. 6 (1) lit. a GDPR.

Disclosure of Personal Data

Data is shared with third parties only with your consent, or where necessary for contract fulfillment (e.g., payment providers, technical service providers).

Legal basis: Art. 6 (1) lit. b GDPR.

Disclosure to authorities occurs only under legal obligations (Art. 6 (1) lit. c GDPR).

No Automated Decision-Making

We do not use automated decision-making, including profiling, under Art. 22 GDPR.

Rights of the Data Subject

You have the following rights:

• Access to your data

• Rectification of inaccurate data

• Erasure or restriction of processing

• Objection to processing based on Art. 6 (1) lit. e or f GDPR (including direct marketing)

• Withdrawal of consent (with effect for the future)

• Data portability

• Complaint to a supervisory authority

You can exercise your rights by contacting:

BZ.COMM GmbH, Gutleutstr.16a, 60329 Frankfurt am Main
or via e-mail: datenschutz@bz-comm.de

Other

This privacy policy only applies to our website content, not to third-party websites we link to (e.g., social networks). Data processing on those platforms is carried out by their operators. Please refer to their privacy policies.