Privacy policy 

Eine komplette Übersicht über die geltenden Datenschutzbestimmungen finden Sie unter folgendem Link: https://b4c-solutions.de/datenschutz/

We are delighted that you have shown interest in our company. Data protection is of particular importance to the management of b4c & solutions GmbH. The use of the websites of b4c & solutions GmbH is generally possible without providing any personal data. However, if a data subject wishes to make use of special services provided by our company via our website, the processing of personal data may become necessary. Where the processing of personal data is required and there is no statutory basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to b4c & solutions GmbH. Through this Privacy Policy, our company wishes to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Privacy Policy informs data subjects of their rights.

As the controller responsible for processing, b4c & solutions GmbH has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of personal data processed through this website. Nevertheless, internet-based data transmissions may generally contain security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

 

  1. Definitions
    The Privacy Policy of b4c & solutions GmbH is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our Privacy Policy should be easy to read and understand for the public, customers, and business partners. To ensure this, we would first like to explain the terminology used.

    Among others, we use the following terms:

    a) Personal Data
    Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as: a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

    b) Data Subject
    A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

    c) Processing
    Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as: collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, making available, alignment or combination, restriction, erasure, or destruction.

    d) Restriction of Processing
    Restriction of processing means marking stored personal data with the aim of limiting its future processing.

    e) Profiling
    Profiling means any form of automated processing of personal data consisting of using personal data to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning: work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

    f) Pseudonymization
    Pseudonymization means processing personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures ensuring that the personal data cannot be attributed to an identified or identifiable person.

    g) Controller
    The controller is the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of processing personal data.
    Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided by Union or Member State law.

    h) Processor
    A processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

    i) Recipient
    A recipient is a natural or legal person, public authority, agency, or another body to whom personal data are disclosed, whether or not a third party.
    However, authorities that may receive personal data under Union or Member State law in the framework of a particular inquiry shall not be regarded as recipients

    j) Third Party
    A third party is a natural or legal person, public authority, agency, or body other than: the data subject, the controller, the processor, or persons authorized to process personal data under the direct authority of the controller or processor.

    k) Consent
    Consent means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of personal data relating to them by a statement or by a clear affirmative action.

 

  1. Name and Address of the Controller
    Controller for the purposes of the General Data Protection Regulation (GDPR), other applicable data protection laws of the Member States of the European Union, and other data protection provisions is:

    b4c & solutions GmbH
    Breslauer Straße 40
    82194 Gröbenzell
    Germany
    Telephone: +49 8142 4219481
    Email: info@b4c-solutions.de
    Website: b4c-solutions.de

 

  1. Cookies
    The websites of b4c & solutions GmbH use cookies. Cookies are text files that are placed and stored on a computer system via an internet browser.

    Many websites and servers use cookies. Many cookies contain a so-called Cookie ID. A Cookie ID is a unique identifier of the cookie. It consists of a string of characters that allows websites and servers to assign the cookie to the specific internet browser in which it was stored. This enables visited websites and servers to distinguish the browser of the data subject from other internet browsers containing different cookies. A specific browser can therefore be recognized and identified by means of the unique Cookie ID.

    By using cookies, b4c & solutions GmbH can provide users of this website with more user-friendly services that would not be possible without the use of cookies.

    Cookies enable us to optimize the information and services offered on our website in the interests of the user. As already mentioned, cookies allow us to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website.

    For example, users of a website that uses cookies do not have to re-enter their login details each time they visit because this information is stored in the cookie. Another example is the shopping cart cookie used in an online store, which remembers the items a customer has placed in their virtual shopping cart.

    The data subject may prevent the setting of cookies by our website at any time by adjusting the settings of the internet browser used and may therefore permanently object to the setting of cookies. Cookies that have already been set can also be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. However, if the data subject disables cookies in the browser, not all functions of our website may be fully available.

 

  1. Collection of General Data and Information
    Each time the website of b4c & solutions GmbH is accessed by a data subject or an automated system, the website collects a range of general data and information. These data are stored in the server log files and may include: the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our website (so-called referrer), the subpages accessed on our website, the date and time of access, the Internet Protocol (IP) address, the Internet service provider of the accessing system, and other similar data and information used for security purposes in the event of attacks on our IT systems.

    When using these general data and information, b4c & solutions GmbH does not draw any conclusions about the identity of the data subject.

    Instead, these data are required to: correctly deliver the content of our website, optimize the content and advertising of our website, ensure the long-term functionality of our IT systems and website technology, and provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.

    These anonymously collected data are evaluated statistically and also analyzed with the aim of increasing data protection and data security within our company, thereby ensuring an optimal level of protection for the personal data we process.

    The anonymous data stored in the server log files are kept separately from any personal data provided by a data subject.

 

  1. Contact via the Website
    The website of b4c & solutions GmbH contains information that enables quick electronic contact with our company as well as direct communication, including a general email address.

    If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject are automatically stored.

    Such personal data, voluntarily provided by the data subject to the controller, are stored solely for the purpose of processing the inquiry or contacting the data subject.

    These personal data are not disclosed to third parties.

 

  1. Subscription to Blog Comments
    Comments posted in the blog of b4c & solutions GmbH can generally be subscribed to by third parties.

    In particular, commenters may subscribe to follow-up comments on a specific blog post.

    If a data subject chooses to subscribe to comments, the controller sends an automatic confirmation email using the double opt-in procedure to verify that the owner of the provided email address actually requested the subscription.

    The subscription to comments may be cancelled at any time.

 

  1. Routine Erasure and Blocking of Personal Data
    The controller processes and stores personal data only for as long as necessary to achieve the purpose of storage or as required by the European legislator or another competent legislator through applicable laws or regulations.
    Once the purpose of storage no longer applies or the prescribed retention period expires, the personal data are routinely blocked or deleted in accordance with statutory requirements.
  2. Rights of the Data Subject

    a) Right to ConfirmationEvery data subject has the right granted by the GDPR to obtain confirmation from the controller as to whether personal data concerning them are being processed.
    To exercise this right, the data subject may contact any employee of the controller at any time.

    b) Right of Access
    Every data subject has the right to obtain, free of charge and at any time, information about the personal data stored concerning them, together with a copy of those data.
    The data subject also has the right to obtain information regarding: the purposes of processing; the categories of personal data processed; the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organizations; where possible, the planned storage period or the criteria used to determine that period; the existence of the right to rectification, erasure, restriction of processing, or objection to processing; the right to lodge a complaint with a supervisory authority; where the personal data were not collected from the data subject, all available information about their source; the existence of automated decision-making, including profiling pursuant to Article 22(1) and (4) GDPR, together with meaningful information about the logic involved and the significance and expected consequences of such processing.

    Furthermore, the data subject has the right to know whether personal data have been transferred to a third country or an international organization.

    Where this is the case, the data subject also has the right to obtain information about the appropriate safeguards relating to the transfer.

    To exercise this right, the data subject may contact any employee of the controller.

    c) Right to Rectification

    Every data subject has the right to obtain the immediate correction of inaccurate personal data concerning them.

    Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of a supplementary statement.

    To exercise this right, the data subject may contact any employee of the controller.

    d) Right to Erasure ("Right to be Forgotten")
    Every data subject has the right to obtain from the controller the immediate erasure of personal data concerning them where one of the following grounds applies and processing is not otherwise required: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws consent on which the processing is based, and there is no other legal basis for processing; the data subject objects to the processing pursuant to Article 21 GDPR and there are no overriding legitimate grounds for the processing; the personal data have been processed unlawfully; the personal data must be erased to comply with a legal obligation under Union or Member State law; the personal data were collected in relation to the offer of information society services pursuant to Article 8(1) GDPR.

    If one of these reasons applies, the data subject may contact any employee of b4c & solutions GmbH, who will ensure that the request for erasure is complied with without undue delay.

    Where personal data have been made public, b4c & solutions GmbH shall, taking account of available technology and implementation costs, take reasonable steps to inform other controllers processing those data that the data subject has requested the erasure of any links to, or copies or replications of, those personal data, insofar as processing is not required.

    e) Right to Restriction of Processing
    Every data subject has the right granted by the GDPR to obtain from the controller the restriction of processing where one of the following conditions applies: the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; the controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise, or defense of legal claims; or the data subject has objected to processing pursuant to Article 21(1) GDPR, pending verification of whether the legitimate grounds of the controller override those of the data subject.

    If one of these conditions is met, the data subject may contact any employee of b4c & solutions GmbH, who will arrange for the restriction of processing.

    f) Right to Data Portability
    Every data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format.

    They also have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, provided that: the processing is based on consent under Article 6(1)(a) or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR; and the processing is carried out by automated means.

    Furthermore, when exercising the right to data portability under Article 20 GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that doing so does not adversely affect the rights and freedoms of others.

    To exercise this right, the data subject may contact any employee of b4c & solutions GmbH.

    g) Right to Object
    Every data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them where the processing is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.

    Upon objection, b4c & solutions GmbH will no longer process the personal data unless compelling legitimate grounds for the processing can be demonstrated that override the interests, rights, and freedoms of the data subject, or unless the processing serves the establishment, exercise, or defense of legal claims.

    Where b4c & solutions GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to such processing. This also applies to profiling related to direct marketing.

    Once an objection has been made, the personal data will no longer be processed for direct marketing purposes.

    In addition, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data for scientific or historical research purposes or for statistical purposes under Article 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

    The right to object may be exercised by contacting any employee of b4c & solutions GmbH. The data subject may also exercise this right through automated means using technical specifications in connection with information society services.

    h) Automated Individual Decision-Making, Including Profiling
    Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision:is necessary for entering into or performing a contract between the data subject and the controller; is authorized by Union or Member State law and provides appropriate safeguards for the rights and freedoms of the data subject; or is based on the explicit consent of the data subject.

    Where one of these exceptions applies, b4c & solutions GmbH shall implement suitable measures to safeguard the rights and freedoms of the data subject, including at least the right: to obtain human intervention, to express their point of view, and to contest the decision.

    To exercise these rights, the data subject may contact any employee of the controller.

    i) Right to Withdraw Consent
    Every data subject has the right to withdraw their consent to the processing of personal data at any time.

    Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

    To exercise this right, the data subject may contact any employee of b4c & solutions GmbH

 

  1. Data Protection in Applications and the Recruitment Process

    The controller collects and processes applicants' personal data for the purpose of conducting the recruitment process.

    Processing may also take place electronically.

    This applies in particular where an applicant submits application documents electronically, for example by email or via a web form provided on the website.

    If the controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of carrying out the employment relationship in compliance with applicable legal requirements.

    If no employment contract is concluded, the application documents will be automatically deleted two months after the rejection decision has been communicated, provided that no other legitimate interests of the controller prevent deletion.

    Such legitimate interests may include, for example, the burden of proof required in proceedings under the German General Equal Treatment Act (AGG).

 

  1. Data Protection Provisions Regarding the Use of Facebook
    The controller has integrated components of Facebook into this website. Facebook is a social network.

    A social network is an internet-based platform that enables users to communicate, interact, and share personal or business-related information with others.

    Facebook allows users to: create private profiles, upload photos, connect with other users via friend requests, and exchange content.

    The operating company of Facebook is:
    Facebook, Inc.
    1 Hacker Way
    Menlo Park, CA 94025
    USA

    If the data subject resides outside the USA or Canada, the controller responsible for data processing is:
    Facebook Ireland Ltd.
    4 Grand Canal Square
    Grand Canal Harbour 2
    Dublin
    Ireland

    Whenever a page of this website containing a Facebook plug-in is accessed, the browser automatically downloads the corresponding Facebook component.

    As part of this process, Facebook receives information about which specific page of our website has been visited.

    If the data subject is logged into Facebook at the same time, Facebook recognizes every visit to our website and records which specific page has been accessed during the entire visit.

    This information is linked to the user's Facebook account.

    If the data subject clicks one of the Facebook buttons integrated into our website (such as the "Like" button) or leaves a comment, Facebook assigns this information to the user's personal Facebook account and stores the personal data.

    Facebook always receives information that the data subject has visited our website whenever the user is logged into Facebook while accessing the website, regardless of whether the Facebook component is clicked.

    If the data subject does not wish this information to be transmitted to Facebook, they can prevent it by logging out of their Facebook account before visiting our website.

    Further information is available in Facebook's Privacy Policy.

 

  1. Data Protection Provisions Regarding the Use of Google Analytics (with IP Anonymization)

    This website uses Google Analytics with IP anonymization.

    Google Analytics is a web analytics service that collects and evaluates data about visitors' behavior on websites.

    Among other things, Google Analytics records: the referring website, accessed subpages, frequency of visits, duration of visits, and other usage statistics.

    The service provider is:
    Google Ireland Limited
    Gordon House
    Barrow Street
    Dublin D04 E5W5
    Ireland

    The controller uses the extension: "_gat._anonymizeIp"

    This causes Google to shorten and anonymize the IP address of visitors from EU Member States or other EEA countries before further processing.

    The purpose of Google Analytics is to analyze visitor behavior on our website.

    Google uses the collected information to: evaluate website usage, create reports on website activities, provide further services related to website use.

    Google Analytics stores a cookie on the user's device.

    Whenever a page containing Google Analytics is visited, the browser automatically transmits data to Google for analysis. During this process Google may receive personal data including: IP address, access time, location, visit frequency.These data may be transferred to servers located in the United States and may also be shared with third parties where required.

    Users can prevent Google Analytics from collecting data by:disabling cookies in their browser, deleting existing Google Analytics cookies, installing Google's Browser Add-on, or using Google's Opt-Out option.

    If the browser add-on is removed or the operating system is reinstalled, the add-on must be installed again to continue preventing data collection.

    Further information is available in Google's Privacy Policy.

 

  1. Data Protection Provisions Regarding the Use of Instagram

    This website integrates components of Instagram.
    Instagram is an audiovisual platform that allows users to: share photographs, publish videos, distribute this content through other social networks.

    The service provider is:
    Facebook Ireland Ltd.
    4 Grand Canal Square
    Grand Canal Harbour
    Dublin 
    Ireland

    Whenever a page containing an Instagram component is accessed, the browser automatically downloads the Instagram component.

    If the visitor is logged into Instagram simultaneously, Instagram recognizes: which page has been visited, the duration of the visit, and links this information to the user's Instagram account.

    If an Instagram button on the website is clicked, the transmitted information is assigned to the user's Instagram account and stored by Instagram.

    Users who do not wish Instagram to receive this information should log out of their Instagram account before visiting the website.

    Further details are available in Instagram's Privacy Policy.

 

  1. Data Protection Provisions Regarding the Use of Xing

    This website uses components provided by Xing.
    Xing is a professional networking platform enabling users to: maintain business contacts, establish new professional connections, create personal profiles, and publish job vacancies.

    The provider is:
    XING SE
    Dammtorstraße 30
    20354 Hamburg
    Germany
    Whenever a page containing a Xing component is accessed, the browser downloads the Xing plug-in.

    If the visitor is logged into Xing, Xing recognizes: the pages visited, the duration of the visit, interactions with Xing buttons such as the Share Button.

    This information is linked to the user's Xing account.

    Users who do not wish Xing to receive this information should log out before visiting the website.

    Further information is available in Xing's Privacy Policy.

 

  1. Data Protection Provisions Regarding the Use of LinkedIn

    This website integrates components of LinkedIn.

    LinkedIn is an online professional networking platform enabling users to: maintain professional contacts, establish new business relationships, create professional profiles.

    The provider is:
    LinkedIn Corporation
    2029 Stierlin Court Mountain View, CA 94043
    USA

    For privacy matters outside the USA:
    LinkedIn Ireland
    Wilton Plaza
    Wilton Place
    Dublin
    Ireland

    Whenever a page containing a LinkedIn plug-in is visited, the browser downloads the corresponding LinkedIn component.

    If the user is logged into LinkedIn, LinkedIn identifies: the pages visited, the duration of the visit, interactions with LinkedIn buttons.

    The collected information is assigned to the user's LinkedIn account.

    Users may prevent this transmission by logging out of LinkedIn before visiting the website.

    Further information is available in LinkedIn's Privacy Policy and Cookie Policy.

 

  1. Data Protection Provisions Regarding the Use of YouTube

    This website incorporates components of YouTube.
    YouTube is an online video platform that enables users to: upload videos, watch videos, rate videos, comment on videos, share multimedia content.

    The provider is:
    Google Ireland Limited
    Gordon House
    Barrow Street
    Dublin D04 E5W5
    Ireland

    Whenever a page containing a YouTube video is visited, the browser automatically loads the corresponding YouTube component.

    If the user is logged into YouTube, YouTube recognizes:which page has been visited, which embedded video has been viewed.

    This information is associated with the user's YouTube account.

    Users who do not wish YouTube or Google to receive this information should log out of their YouTube account before accessing the website.

    Further information regarding the processing of personal data is available in Google's Privacy Policy.

 

  1. Legal Basis for Processing

    Article 6(1) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific purpose.

    Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Article 6(1)(b) GDPR. This also applies to processing operations required to carry out pre-contractual measures, such as responding to inquiries regarding our products or services.

    Where our company is subject to a legal obligation requiring the processing of personal data (for example, tax obligations), the processing is based on Article 6(1)(c) GDPR.

    In rare cases, processing may be necessary to protect the vital interests of the data subject or another natural person. This would apply, for example, if a visitor were injured on our premises and their name, age, health insurance details, or other essential information had to be disclosed to a doctor or hospital. In such cases, processing would be based on Article 6(1)(d) GDPR.

    Finally, processing operations may be based on Article 6(1)(f) GDPR, where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

    The European legislator has expressly recognized that such a legitimate interest may exist, particularly where the data subject is a customer of the controller (Recital 47 GDPR).

 

  1. Legitimate Interests Pursued by the Controller or a Third Party

    Where processing is based on Article 6(1)(f) GDPR, our legitimate interest is the conduct of our business activities for the benefit of all employees and shareholders.

 

  1. Period for Which Personal Data Are Stored

    The criterion for determining the storage period of personal data is the applicable statutory retention period.

    Once the applicable retention period expires, the relevant personal data are routinely deleted unless they are still required for the performance or initiation of a contract.

 

  1. Statutory or Contractual Requirement to Provide Personal Data

    We inform you that the provision of personal data may be: required by law (for example, tax regulations), required under contractual obligations, or necessary for the conclusion of a contract.

    In some cases, it is necessary for a data subject to provide personal data before a contract can be concluded. For example, anyone entering into a contract with our company must provide certain personal data so that the contract can be performed.

    Failure to provide the required personal data may result in the inability to conclude a contract.

    Before providing personal data, the data subject may contact one of our employees, who will explain whether the provision of such data is legally or contractually required, whether it is necessary for the conclusion of a contract, and what consequences may arise if the data are not provided.

 

  1. Automated Decision-Making

    As a responsible company, we do not use automated decision-making or profiling.

 

  1. Google Maps

    This website uses the Google Maps service via an API.

    The provider is:
    Google Inc.
    1600 Amphitheatre Parkway
    Mountain View, CA 94043
    USA

    To use Google Maps, it is necessary to store your IP address.

    This information is generally transmitted to and stored on a Google server in the United States.

    The operator of this website has no influence over this data transmission.

    Further information on Google's handling of user data can be found in Google's Privacy Policy.

 

  1. SSL Encryption

    For security reasons and to protect the transmission of confidential content—such as inquiries sent to us through this website—this website uses SSL encryption.

    You can recognize an encrypted connection when: the browser address changes from http:// to https://, and a padlock icon appears in your browser's address bar.

    When SSL encryption is activated, the data you transmit cannot be read by third parties.

 

  1. Objection to Advertising Emails

    The use of contact information published in accordance with legal notice requirements for sending unsolicited advertising or informational materials is hereby expressly prohibited.

    The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, including spam emails.

 

Source

This Privacy Policy was created using the Privacy Policy Generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, acting as an external data protection officer in Cologne, in cooperation with Christian Solmecke, attorney specializing in data protection law.