Privacy Policy

We are pleased about your interest in our website. The protection of your personal data is of great importance to us. We observe the statutory provisions relating to data protection and data security.

In particular, we are subject to the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act in the version in force since 25 May 2018 (BDSG), the German Digital Services Act (DDG) and the German Telecommunications and Telemedia Data Protection Act (TDDDG). Under these provisions, we are authorised in particular to collect and use personal data insofar as this is necessary to enable you to use our online offering at www.bxc-security.com, including all services and functions contained therein.

Below you will find information about what personal data we collect when you use our website and make use of the services and functions contained therein, and how we use this data and for what purposes.

1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is:

BxC GmbH & Co. KG
Föhrenweg 1 85399 Hallbergmoos
Tel.: +49-811-12880743
Website: www.bxc-security.com

2. Name and Address of the Data Protection Officer

The data protection officer of the controller is:  

Johannes Schwiegk
Datenzeit GmbH
Friedrich-Engels-Allee 200
D-42285 Wuppertal
Tel.: +49-202-94794940
E-Mail: datenschutz@datenzeit.de
Website: https://www.datenzeit.de/

3. General Information on Data Processing

Scope of the Processing of Personal Data

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Personal data of our users is processed on a regular basis only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and where the processing of the data is permitted by statutory provisions.

Legal Basis for the Processing of Personal Data

Where we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.  

Where processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.  

Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.  

In cases where processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.  

Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and where those interests are not overridden by the interests, fundamental rights and fundamental freedoms of the data subject, Art. 6(1)(f) GDPR serves as the legal basis for processing.

Data Deletion and Storage Period

The personal data of the data subject will be deleted or restricted as soon as the purpose of storage no longer applies. Storage may take place beyond this if provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data will also be restricted or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or performance of a contract.

4. Provision of the Website and Creation of Log Files

Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Volume of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software


We cannot attribute this data to specific persons. We do not combine this data with other data sources.
‍
The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR.

Purpose of Data Processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. Storage also takes place to ensure the functionality of the website. In addition, the data serves to optimise the website and to ensure the security of our IT systems. There is no evaluation of the data for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6(1)(f) GDPR.

Storage Period

Data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session has ended. Data is also deleted after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or anonymised so that it is no longer possible to identify the accessing client.

Right to Object and Erasure

The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

5. Use of Cookies

Our websites use what are known as "cookies". Cookies are small text files that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently on your device (persistent cookies). Session cookies are automatically deleted when you end your visit. Persistent cookies remain stored on your device until you actively delete them or until they are automatically deleted by your web browser.

In some cases, third-party cookies may be stored on your device when you enter our website (third-party cookies). These enable you or us to use certain services offered by third parties (e.g. cookies for processing payment services).

Cookies have a variety of functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). The purpose of other cookies may be to analyse user patterns or to display advertising messages.

Cookies that are required for carrying out electronic communication processes (necessary cookies), for providing certain functions that you wish to use (functional cookies, e.g. for the shopping cart function), or that are required for optimising the website (e.g. cookies that provide measurable insights into the web audience), are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of the operator's services. Where your consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR); this consent can be revoked at any time.

You have the option of setting your browser to inform you every time cookies are set and to allow the acceptance of cookies only in certain cases. You can also exclude the acceptance of cookies in certain cases or in general, or activate the delete function for automatic deletion of cookies when closing the browser. If cookies are deactivated, the functions of this website may be restricted.

If cookies from third parties are used, or if cookies are used for analytical purposes, we will inform you separately within the context of this privacy policy and, if applicable, ask for your consent.

6. Newsletter

Description and Scope of Data Processing

Our website offers the option of subscribing to a free newsletter. When registering for the newsletter, the data entered in the input form is transmitted to us.

We verify your consent to receive our newsletter by email using what is known as the double opt-in procedure. This means that we first send an email to the email address you provided when subscribing, asking you to actively confirm your consent to receive the newsletter before we begin sending it. The confirmation information is used by us to document and, if necessary, prove your consent.

Furthermore, subject to certain special conditions, we may also send you our newsletter without your consent. Under existing customer relationships, we are legally permitted to advertise similar goods and services by email without having obtained your consent. In connection with the data processing for sending newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.

Legal Basis for Data Processing

The legal basis for processing data after registration for the newsletter is your consent pursuant to Art. 6(1)(a) GDPR. The legal basis for sending the newsletter following the sale of goods or services is Section 7(3) of the German Act Against Unfair Competition (UWG).

Purpose of Data Processing

The collection of the user's email address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

Storage Period

Data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the newsletter subscription is active.

Right to Object and Erasure

The newsletter subscription can be cancelled by the affected user at any time without incurring any costs other than the transmission costs at the basic rates. For this purpose, there is a corresponding link in every newsletter.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent prior to its withdrawal. If you withdraw your consent, we will delete this data and no longer send you newsletters.

7. Use of Google Cloud CDN

1. Scope of the Processing of Personal Data

This website uses the "Google Cloud CDN" service. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Cloud CDN uses geographically distributed servers to increase the loading speed of our website and to deliver content more efficiently to users. The data processed includes in particular your IP address and location data, as well as, under certain circumstances, technical data such as browser information, device types and usage statistics. Data may be processed in the USA.

Where personal data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework and, where applicable, on the basis of the European Commission's standard contractual clauses.

2. Legal Basis for the Processing of Personal Data

The legal basis for the use of Google Cloud CDN is Art. 6(1)(f) GDPR.

3. Purpose of Data Processing

The use of Google Cloud CDN improves the user experience of our website. Content on our website is delivered faster and more reliably. In addition, Google's use of the service is used for analysing and optimising the delivery of content.

4. Storage Period

Data processed by Google Cloud CDN is stored in accordance with the retention periods set by Google. As a rule, storage takes place for the period required to provide the CDN service. Google's applicable data protection provisions can be found at https://www.google.com/policies/privacy/.

5. Right to Object and Erasure

You have the option of objecting to the processing of your data by Google Cloud CDN at any time, for example by restricting the use of Google services on your device or by blocking them via your browser settings.

The processing of data by Google can also be changed and excluded at https://adssettings.google.com/authenticated.

8. Use of Google Tag Manager  

1. Scope of the Processing of Personal Data

This website uses the Google Tag Manager. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The only data processed is your IP address, which is necessary to run the Google Tag Manager but is not collected without your consent (e.g. through appropriate settings in your browser or our consent management tool). The Tag Manager itself does not create user profiles or store cookies.

Data may be processed in the USA. Where personal data is transferred to the USA, Google has submitted to the EU-US Data Privacy Framework, and the EU Commission's standard contractual clauses are also used. Further information is available at https://business.safety.google/adsprocessorterms/.

2. Legal Basis for the Processing of Personal Data

The legal basis for the use of the Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR.

3. Purpose of Data Processing

The use of the Google Tag Manager enables us to manage so-called website tags via an interface, allowing us to integrate other services into our online offering (please refer to the further and specific information in this privacy policy on this).

4. Storage Period

We would like to point out that we have no specific knowledge of the transmitted data or its use by Google. For more information about the Google Tag Manager, please visit https://marketingplatform.google.com/intl/en/about/tag-manager/. Google's applicable data protection provisions can be found at https://www.google.com/policies/privacy/.

5. Right to Object and Erasure

You can withdraw your consent at any time by changing the settings in our consent management tool. Please note that your objection does not affect the lawfulness of the data processing up to that point.

The processing of data by Google can also be changed and excluded at https://adssettings.google.com/authenticated.

9. Use of AWS CloudFront  

1. Scope of the Processing of Personal Data

This website uses the "Amazon Web Services (AWS) CloudFront" service. The provider of this service is Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA. The service is used to efficiently deliver content on our website and to improve loading speed for our users. In the context of using the service, data such as IP addresses, web browser information, devices used and similar technical information may be processed in order to deliver content quickly to end users. In addition, data about your interactions with the content provided on our website, such as frequency and duration of access, may be collected.

The service is a globally distributed network that provides data from servers worldwide. As a result, your data may also be processed in countries outside the European Union.

Where personal data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework and, where applicable, on the basis of the European Commission's standard contractual clauses.

2. Legal Basis for the Processing of Personal Data

The legal basis for the use of AWS CloudFront is Art. 6(1)(f) GDPR.

3. Purpose of Data Processing

The use of AWS CloudFront improves the user experience of our website. Content on our website is delivered faster and more reliably. In addition, the use of the service may be used for the analysis and optimisation of content delivery.

4. Storage Period

Data processed by AWS CloudFront is stored for a period necessary to provide the service. As a rule, this means that technical usage data is stored for a few days to weeks.

5. Right to Object and Erasure

You have the option of objecting to the processing of your data by AWS CloudFront at any time, for example by restricting the use of the service on your device or by blocking it via your browser settings.

10. Use of Cloudflare Turnstile

1. Scope of the Processing of Personal Data

To protect input forms on our site, we use the Cloudflare service "Turnstile". The provider of this service is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. In order to verify whether data entry in our forms, and in particular the contact form, is carried out by a human or by an automated program, Turnstile analyses the behaviour of website visitors based on various characteristics. The analysis begins automatically when the website is visited and various pieces of information are evaluated (e.g. IP address, date and duration of the website visit, operating system, browser, cookies, display instructions, scripts and mouse movements made).

Data may be processed in the USA. Where personal data is transferred to the USA, Cloudflare has submitted to the EU-US Data Privacy Framework, and the EU Commission's standard contractual clauses are also used.

2. Legal Basis for the Processing of Personal Data

The legal basis for the use of Cloudflare Turnstile is Art. 6(1)(f) GDPR.

3. Purpose of Data Processing

We use the service to protect input forms on our site. By using this service, it is possible to distinguish whether the relevant input is of human origin or is carried out abusively by automated machine processing.

4. Storage Period

We would like to point out that beyond the data mentioned, we have no specific knowledge of the data transmitted or its use by Cloudflare. Cloudflare's applicable data protection provisions can be found at https://www.cloudflare.com/privacypolicy/ and https://www.cloudflare.com/cloudflare-customer-dpa/.

5. Right to Object and Erasure

The IP address transmitted via Turnstile is not merged with other data from Cloudflare. Since Turnstile only receives data controlled and determined by us as the website operator, Turnstile does not offer its own objection and erasure options.

You can completely prevent the collection and processing of your data by Turnstile by deactivating the execution of script code in your browser or by installing a script blocker in your browser.