Privacy Information

Protecting your personal data matters to us. We take data protection seriously and handle your data responsibly, confidentially and in accordance with applicable data protection laws.

Our principle is simple: we collect and process only the personal data we actually need to provide our website, respond to your enquiries, deliver our services or manage a business relationship with you or your company.

For us, data protection does not start with this privacy information, but with the selection and development of our systems. Where it is useful and technically feasible, we use our own solutions or data-minimising alternatives.

As our website, services and technologies continue to evolve, we review and update this privacy information regularly.

The controller responsible for the processing of personal data is:

B&B Ingenieurgesellschaft mbH, Raiffeisenstraße 40, 78166 Donaueschingen, Germany

Represented by: Dipl.-Ing. Achim Bäuerle and Markus Roman Gorny

Email: info@bbsoft.de · Phone: +49 771 83262-0

You can also find our full company information in our legal notice.

No data protection officer has been appointed.

What data we process

The personal data we process depends on how you use our website or interact with us. This may include contact details, communication content, technical connection data, form entries, uploaded files, registration data, order data and information relating to the use of individual services.

Purposes of processing

We process personal data in particular to provide our website securely and reliably, respond to enquiries, provide online forms, send newsletters, operate customer areas, provide support and remote maintenance, deliver digital products, process orders and manage business relationships.

Legal bases

We process personal data only where there is a legal basis for doing so. Depending on the situation, processing may be carried out to perform a contract or pre-contractual measures, based on your consent, to comply with legal obligations or based on our legitimate interest in operating our website and services securely, efficiently and in a user-friendly way.

Retention period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. Once the purpose no longer applies and no statutory retention obligations exist, the data will be deleted or anonymised. Different retention periods may be described in individual sections of this privacy information.

Recipients and service providers

Personal data is shared with third parties only where this is necessary to provide our website, deliver our services, manage a business relationship or comply with legal obligations. Where we use service providers, this is done in accordance with applicable legal requirements.

Transfers to third countries

Some of the services mentioned in this privacy information are provided by companies based outside the European Union or the European Economic Area, or may use servers in those countries. We select our service providers carefully and aim to have personal data processed within the European Union wherever possible.

Where personal data is transferred to third countries, this is done only on the basis of an adequacy decision by the European Commission or appropriate safeguards, in particular the standard contractual clauses approved by the European Commission, unless another legal basis applies.

Source of personal data

We usually receive personal data directly from you, for example when you use our website, contact us or use our services. Where necessary for initiating or managing a business relationship, personal data may also come from your employer, business partners, public directories or other lawfully accessible sources.

Obligation to provide personal data

You can generally use our website without providing personal data. However, if you want to use one of our online forms, subscribe to our newsletter, use a customer account or order products and services, we need the information required for that purpose. Without this data, we cannot process your enquiry, registration, order or the relevant contract.

Data security

We take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. For security reasons, our website uses an encrypted connection (HTTPS/TLS). This protects transmitted data during transfer.

Automated decision-making

We do not use solely automated decision-making or profiling within the meaning of Article 22 GDPR.

Our website is hosted by STRATO. STRATO provides the technical infrastructure for operating the website and the email mailboxes.

When you access our website, the hosting provider processes technically necessary connection data, such as IP address, date and time of access, pages accessed, amount of data transferred, browser information and server log files. This data is required to display the website, operate it technically and protect it against disruptions or attacks.

STRATO may also create technical backups as part of the hosting service. The processing is based on our legitimate interest in operating our website securely and reliably.

We use the Silktide Consent Manager to obtain, manage and document consents for certain services and cookies. The consent manager helps us activate services that require consent only after you have given your consent.

The consent manager itself is required to manage your privacy settings and is therefore used without prior consent. Technically necessary information may be processed, such as your selection and the time of consent.

Where we require your consent for certain services, you can change or withdraw it at any time with effect for the future. To do so, use the icon or link provided by the consent manager on our website. The lawfulness of processing carried out before withdrawal remains unaffected.

Information about the cookies and consent-based services used can also be accessed through the consent manager.

You can use various online forms on our website. The data collected in each case depends on the respective form. We process the personal data you provide only to handle your specific request or to provide the service you requested.

Mandatory fields are marked accordingly. We make sure to request only the data that is necessary for the respective purpose. If you upload files, we process them only in connection with your enquiry or the relevant process.

Depending on the request, processing is carried out to take pre-contractual steps or perform a contract, based on your consent or based on our legitimate interest in handling enquiries and communication efficiently.

Email communication

If you communicate with us by email, we process the personal data you provide to handle your enquiry, manage our business relationship and document the communication.

Our email communication is managed through our own CRM system. Sending and receiving email takes place via the email infrastructure of our hosting provider STRATO (IMAP, POP3 and SMTP). Correspondence is stored where this is necessary to handle your enquiry, perform a contract, meet legal obligations or protect legitimate interests.

Google reCAPTCHA

We use Google reCAPTCHA to protect our online forms against spam and misuse. The service helps us determine whether entries are made by a natural person or by automated means.

Google reCAPTCHA is activated only after your consent. Personal data may be transmitted to Google, in particular technical information about your browser and your use of the website.

We provide a protected login area for existing customers. Access is made available only to authorised users. For login, we process access data such as username or email address and password. Passwords are not stored in plain text.

No personal data is displayed or managed in the customer area. The customer area is used to access provided functions or content.

We also provide documents and information for download on our website. Some content is freely accessible, while further downloads are available only to logged-in customers in the protected customer area. When files are downloaded, technically necessary connection data may be processed.

We use Brevo exclusively to send our newsletter. If you subscribe to our newsletter, we process the data required for this purpose, in particular your email address and any additional voluntary information.

Brevo is not used for existing-customer advertising or transactional emails. We also use Brevo to analyse open and click rates in order to improve the newsletter and its content.

The sending and analysis of the newsletter are based on your consent. You can unsubscribe at any time using the unsubscribe link in the newsletter or by contacting us. The lawfulness of processing carried out before unsubscribing remains unaffected.

We use various Google services. Google services that require consent are activated only after your consent via the consent manager. Google Signals is disabled.

Google Tag Manager

Google Tag Manager helps us technically manage other services on our website. It does not itself set analytics or marketing cookies, but may be used to trigger other services after you have given your consent.

Google Analytics

We use Google Analytics to better understand which content on our website is used and how we can improve our offering. Google Analytics is activated only after your consent.

IP anonymisation is enabled. Data sharing for Google products is disabled. We do not use Google Analytics for automated decisions or for creating personal user profiles within the meaning of Article 22 GDPR.

Google Ads, conversion tracking and remarketing

We use Google Ads including conversion tracking and remarketing to measure the success of our advertising and to show interest-based advertising to visitors. These services are activated only after your consent.

Conversion tracking allows us to see whether a visitor performs a specific action on our website after clicking on an advertisement. Remarketing allows visitors to our website to be addressed later with relevant advertisements. We do not use Google Signals.

Google Maps

We use Google Maps so that you can easily find our location. Google Maps is loaded only after your consent. If you activate the map, a connection to Google is established and personal data, in particular your IP address and technical connection data, may be transmitted to Google.

YouTube

We embed YouTube videos in enhanced privacy mode. YouTube content is loaded only after your consent. If you activate or play a video, a connection to YouTube or Google is established and personal data may be processed.

Google Fonts

We provide the Google Fonts used on our website locally from our own web server. This means that no connection to Google servers is established merely to load fonts when you access our website.

For support, maintenance and communication services, we use MeshCentral, TeamViewer, AnyDesk or Zoom as required. These tools are used only at the request of, or with the consent of, our customers or communication partners.

Depending on the support case, screen access may take place or files may be exchanged where this is necessary for error analysis or problem resolution. Remote support takes place only during a session initiated or expressly approved by the customer.

We also use Zoom for online meetings, consultations, training and presentations. Recordings are not made by default, but only in individual cases for internal purposes and after the participants have been informed accordingly.

OMR Reviews

We may embed content from OMR Reviews to display reviews or information about our services. OMR Reviews is loaded only after your consent. If you activate the embedding, a connection to OMR Reviews may be established and technical connection data may be processed.

Location infographic

On our website, we provide a link to an interactive location infographic provided by FAMIGO GmbH, In der Spöck 10, 77656 Offenburg, Germany. No data is transmitted to the provider before you click the link.

Only after you click the link is a connection established to the servers of locationexplorer.de. In particular, your IP address and other technically necessary connection data may be processed. The operator of the linked website is solely responsible for the processing of personal data on that website.

Further information about the processing of personal data can be found in FAMIGO GmbH's privacy policy at https://famigo.info/index.php/datenschutzerklaerung/.

LamaPoll

If we invite you to take part in a voluntary survey, this may be done via a link to LamaPoll. LamaPoll is not directly embedded on our website. A connection to the provider is established only if you click such a link. Depending on the survey, information may be collected anonymously or in a personal form. The scope of processing depends on the respective survey.

Social media links

Our website contains links to our profiles on LinkedIn, Facebook and YouTube. These are ordinary links, not social plugins, embedded feeds or like buttons. Only when you click such a link do you leave our website and the privacy policies of the respective provider apply.

Where our online shop is used, we process the data required for registration, ordering, contract performance, licence management, invoicing and the provision of digital products or online events.

The shop is intended exclusively for business customers. New business customers can register. In this process, company data, contact person details, email address, billing data and, where applicable, a VAT identification number may be processed.

Digital products, software, licences or access data are provided electronically, for example by email with a download link or licence key. Invoicing is carried out through our own system.

The planned payment methods include advance payment, invoice, PayPal and credit card. The specific payment service providers used will be added once the shop and payment processing are fully operational.

If you or your company contact us, request offers, enter into contracts or use our services, we process personal data to initiate, perform and manage the business relationship.

This includes, in particular, contact details of contact persons, communication data, contract data, support information, licence data, billing data and other data required for the respective business relationship.

Processing is carried out in particular to take pre-contractual steps and perform contracts, to comply with legal obligations and based on our legitimate interest in efficient customer support, documentation and delivery of our services.

Subject to the statutory requirements, you have the right to obtain information about the personal data we process, to have inaccurate data corrected, to request deletion, to restrict processing, to data portability and to object to certain processing activities.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. For consent-based website services, use the icon or link provided by the consent manager or contact us.

If you believe that we are not processing your personal data in accordance with applicable data protection laws, you have the right to lodge a complaint with a data protection supervisory authority. You may contact, in particular, the supervisory authority of your habitual residence, your place of work or our company seat.

If you have any questions about this privacy information or about the processing of your personal data, please contact us. You can reach us at any time at info@bbsoft.de.