We are very pleased about your interest in our company. Data protection is of particularly high importance to the management of BWS IT GmbH. The use of the BWS IT GmbH website is generally possible without providing any personal data. However, if a data subject wishes to use special services provided by our company via our website, the processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to BWS IT GmbH. By means of this privacy policy, our company would like to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.

BWS IT GmbH has implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed through this website. Nevertheless, internet-based data transmissions may generally contain security gaps, so absolute protection cannot be guaranteed.

\1. Definitions

a) Personal Data

Personal data means any information relating to an identified or identifiable natural person (“data subject”).

b) Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for processing.

c) Processing
Processing means any operation performed on personal data, whether or not by automated means, including collection, storage, organization, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.

d) Restriction of Processing
Restriction of processing means the marking of stored personal data with the aim of limiting future processing.

e) Profiling
Profiling means any form of automated processing of personal data used to evaluate personal aspects relating to a natural person.

f) Pseudonymization
Pseudonymization means processing personal data in such a manner that the data can no longer be attributed to a specific data subject without additional information.

g) Controller Responsible for Processing

The controller is the natural or legal person determining the purposes and means of the processing of personal data.

\2. Name and Address of the Controller
BWS IT GmbH
Am Alten Güterbahnhof 10
50825 Cologne
Germany

Phone: +49 221 986 56449
Email: contact@bws-dev.com
Website: bws-dev.com

\3. Collection of General Data and Information

The website of BWS IT GmbH collects a range of general data and information whenever a data subject or automated system accesses the website. This information may include browser types, operating systems, referrer websites, accessed subpages, date and time of access, IP addresses, internet service providers, and other technical information.

This information is required to correctly deliver website content, optimize website performance and advertising, ensure the long-term functionality of our systems, and provide law enforcement authorities with information necessary for prosecution in the event of cyberattacks.

\4. Contact Possibility via the Website

If a data subject contacts us by email or via a contact form, the transmitted personal data will be stored automatically for the purpose of processing the request or contacting the data subject. This data will not be shared with third parties.

Data entered into our contact forms (name, company, email address, phone number, message or project description) is sent to us by email via our mail server and stored in our email system. The legal basis is Article 6(1)(b) GDPR (pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interest in answering inquiries). The data is deleted once the request has been fully processed and no statutory retention obligations apply.

\5. Routine Erasure and Blocking of Personal Data

The controller processes and stores personal data only for the period necessary to achieve the storage purpose or as required by applicable laws and regulations.

\6. Rights of the Data Subject
Data subjects have the following rights under the GDPR:
- Right to confirmation
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Rights relating to automated decision-making and profiling
- Right to withdraw consent at any time

\7. Protection of Contact Forms by Cloudflare Turnstile
To protect our contact forms against automated submissions (spam, bots), we use the Turnstile service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When a form is submitted, Turnstile checks whether the input was made by a human. Technical data such as the IP address, browser and device information and interaction behavior on the page is transmitted to Cloudflare and evaluated there. We do not link this data to your person; Turnstile does not set tracking cookies.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in protecting our systems against misuse and preventing spam. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework, under which Cloudflare is certified, and on the EU Commission's standard contractual clauses. Further information is available in Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.

This website does not use web analytics services such as Google Analytics.

\8. Legal Basis for Processing
Processing activities are based on Article 6 GDPR, including consent, contractual necessity, legal obligations, protection of vital interests, and legitimate interests pursued by the company.

\9. Legitimate Interests
Where processing is based on Article 6(1)(f) GDPR, our legitimate interest is the conduct of our business operations for the benefit of all employees and shareholders.

\10. Storage Duration
Personal data is stored for the duration required by statutory retention periods. Once the retention period expires, the data is routinely deleted unless required for contract fulfillment or initiation.

\11. Provision of Personal Data
The provision of personal data may be legally or contractually required. Failure to provide personal data may result in the inability to conclude a contract.

\12. Automated Decision-Making
As a responsible company, we do not use automated decision-making or profiling.

This privacy policy was generated by the DGD Deutsche Gesellschaft für Datenschutz GmbH in cooperation with attorney Christian Solmecke.