PRIVACY POLICY

PRIVACY POLICY

NAME AND CONTACT DETAILS OF THE RESPONSIBLE PERSON

b2system GmbH & Co KG, represented by CEO Jürgen Benz, is responsible for compliance with the information obligations pursuant to Art. 13 and 14 GDPR and the other rights of data subjects as well as for dealing with any data protection violations.

Riemenschneiderstraße 2
63808 Haibach
Germany


E-Mail: contact@b2system.com
Phone: +49 (0)631 / 205 778 3-0

PURPOSES AND LEGAL BASES OF THE PROCESSING

Your data is collected for this purpose:

– when calling up websites

– in connection with external hosting

– for collection within forms (for establishing contact)

– for inquiries by e-mail or telephone


Your data will be processed on the basis of Art. 6 para. 1 lit. f GDPR in connection with the establishment of contact.

Calling up websites

When you use our website for information purposes only, i.e. even if you do not actively provide us with further information, so-called server log files are automatically recorded, such as your IP address, the web browser and operating system you use, the domain name of your Internet provider and other data.

This serves the purposes of a smooth connection setup, the corresponding usability and the stability and security of the websites and is based on our legitimate interest in improving the stability and functionality of our websites in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

The recipients of the data may be technical service providers for the operation and maintenance of our websites who work for us on our behalf in accordance with Art. 28 GDPR.

The data is generally deleted at the end of the respective session, as it is then generally no longer required for the stated purposes.

External hosting

Our websites are hosted by the external service provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (provider). The personal data collected during use is stored on the provider’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The provider is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our provider will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data. In order to ensure data protection-compliant processing, we have concluded an order processing contract with our provider.

Collection of data through forms

On our website you will find forms for individual communication (e.g. for contacting us). If you make use of these forms, the data entered in the input mask will be transmitted to us and stored. This data typically includes names, addresses, e-mail addresses, telephone numbers and any other information you provide to us.

The legal basis for the processing of data transmitted to us via the contact form is generally Art. 6 para. 1 lit. f GDPR, as the purpose pursued and our legitimate interest is to simply contact you and process your request.

The data will be deleted no later than 6 months after the matter in question has been conclusively clarified. If there is a contractual relationship, the statutory retention periods apply, according to which your data will be deleted after 6 or 10 years.

Request by e-mail or telephone

If you contact us by e-mail or telephone, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR).

The data sent will remain with us until you ask us to delete it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

TECHNOLOGIES

Google reCAPTCHA

Google reCAPTCHA is used on our website; the provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

This is to check whether the data input, e.g. in a contact form, is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). In addition, we have a legitimate interest in protecting our website from abusive automated spying and spam (Art. 6 para. 1 lit. f GDPR).

Further information on Google reCAPTCHA and Google’s privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/

If, in connection with the aforementioned Google tools, personal data is transferred to the USA or to servers of the US company Google LLC. we base this on the EU Commission’s adequacy decision on the EU-US Data Privacy Framework (DPF) as the legal basis.

Google Fonts

Our pages use so-called web fonts from Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. In order to avoid the transmission of personal data to Google’s servers in the USA, we have integrated Google Fonts locally.

DISCLOSURE OF DATA

Your personal data will not be transferred to third parties for purposes other than those mentioned above. In summary, we will only pass on your personal data to third parties if you have consented to this in accordance with Art. 6 para. 1 p. 1 lit. a GDPR, you have given your consent in accordance with Art. 6 para. 1 p. 1 lit. b GDPR is required for the processing of contractual relationships with you, this is necessary to safeguard our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR (e.g. for the assertion, exercise or defense of legal claims or in the context of advertising measures) and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data or if there is a legal obligation pursuant to Art. 6 para. 1 p. 1 lit. c GDPR for disclosure exists.

SAFETY

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, we would like to point out that data transmission on the Internet (especially when communicating by e-mail) can have security gaps.

DURATION AND STORAGE OF PERSONAL DATA

After collection, your data will only be stored by us for as long as is necessary for the respective task fulfillment (for contact purposes), taking into account the statutory retention periods.

RIGHTS AFFECTED

You have the following rights under the EU General Data Protection Regulation:

If your personal data is processed, you have the right to obtain information about the personal data stored about you (Art. 15 GDPR).

If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR). If the legal requirements are met, you can request the deletion or restriction of the processing and object to the processing (Art. 17, 18 and 21 GDPR).

If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).

If you make use of your above-mentioned rights, we will check whether the legal requirements for this are met. Furthermore, there is a right of appeal to the State Commissioner for Data Protection.

UPDATING AND AMENDMENT OF THE PRIVACY POLICY

This privacy policy is currently valid and was last updated in March 2025, but is subject to constant further development. The current privacy policy can be accessed at any time on our website.