Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

2. Hosting & server log files

This website is operated on our own server (Coolify-based infrastructure). When you access our website, the server automatically records information transmitted by your browser in so-called server log files. These include in particular:

• IP address of the accessing device
• date and time of access (timestamp)
• name and URL of the requested file
• volume of data transferred and access status (HTTP status code)
• browser type and operating system used
• referrer URL (the previously visited page)

This data is processed on the basis of Art. 6 (1)(f) GDPR. Our legitimate interest lies in the technical provision, stability and security of the website. Log files are deleted once their purpose has been fulfilled or anonymised after a short period.

3. Contacting us

If you contact us via the contact form, by email or by phone, we process the data you provide (e.g. name, email address, company, subject and the content of your message) in order to handle your enquiry.

The legal basis is Art. 6 (1)(b) GDPR insofar as your enquiry relates to the initiation or performance of a contract, otherwise our legitimate interest in responding to your enquiry pursuant to Art. 6 (1)(f) GDPR or your consent pursuant to Art. 6 (1)(a) GDPR. Your data is deleted as soon as it is no longer required to achieve the purpose, unless statutory retention obligations apply.

4. Cookies & tracking

By default, this website does not set any cookies for analytics or marketing purposes and does not use tracking. Should technically necessary cookies be used, they serve exclusively the secure and proper operation of the website; the legal basis in this respect is § 25 (2) TDDDG or Art. 6 (1)(f) GDPR. We do not use any third-party services that process personal data for analytics or advertising purposes.

5. Your rights as a data subject

You have the following rights with regard to the personal data concerning you:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)

Where processing is based on your consent, you have the right to withdraw it at any time with effect for the future.

6. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

7. Contact for data protection enquiries

To exercise your rights or for questions regarding data protection, please contact: info@bt-merchandising.de.