Privacy policy

Controller

Collection and processing of personal data

Personal data is any information relating to an identified or identifiable natural person. We only process personal data to the extent necessary to provide a functioning website and our content.

Unless stated otherwise, the legal basis for processing is our legitimate interest in providing this website securely and reliably (Art. 6 (1) (f) GDPR).

Hosting and server log files

This website is operated by an external service provider (host). The personal data collected on this website is stored on the host's servers. This is done for the purpose of a secure, fast and reliable provision of our services (Art. 6 (1) (f) GDPR).

Each time the website is accessed, information is automatically recorded in so-called server log files that your browser transmits: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources and is used solely for the technical provision and security of the website.

Contacting us (contact form and email)

If you contact us via the contact form or by email, the details you provide (name, email address and your message) will be processed for the purpose of handling your enquiry and any follow-up questions. Submitting the contact form is based on your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time with effect for the future. Where your enquiry relates to the performance of a contract or pre-contractual measures, the legal basis is Art. 6 (1) (b) GDPR, and otherwise our legitimate interest in responding to your enquiry (Art. 6 (1) (f) GDPR).

For the technical dispatch of our e-mails (contact form notifications and newsletter), we use the Amazon Simple Email Service (SES) provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg, with processing taking place in the AWS Frankfurt region (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with AWS; the e-mail address and message content are processed exclusively for the purpose of dispatch.

Storage period

We process and store your personal data only for as long as is necessary to achieve the respective purpose or as required by statutory retention periods. Once the purpose no longer applies, the data is deleted.

Your rights

You have the following rights regarding your personal data: right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21).

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

SSL/TLS encryption, cookies and analytics

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.

This website currently does not use any cookies for analytics or marketing purposes, nor any tracking or web analytics services. Should this change, this privacy policy will be updated accordingly.

Newsletter

To send our newsletter, we use the self-hosted software Listmonk on our own server in Germany; the recipient list is therefore managed without any external newsletter service. When you subscribe, we process your e-mail address as well as the time of subscription and unsubscription. Registration takes place via the double opt-in procedure: you receive a confirmation e-mail and are only added to the mailing list after clicking the confirmation link.

The legal basis for the processing is your consent (Art. 6 (1) (a) GDPR). You may unsubscribe from the newsletter at any time via the unsubscribe link contained in every e-mail or by sending us a message; your data will then be deleted from the mailing list. For the technical dispatch of our e-mails (contact form notifications and newsletter), we use the Amazon Simple Email Service (SES) provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg, with processing taking place in the AWS Frankfurt region (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with AWS; the e-mail address and message content are processed exclusively for the purpose of dispatch.

Online appointment booking

If you request an appointment via our website, we process the data you provide (selected service, appointment date and appointment type, name, e-mail address, telephone number, the address in the case of on-site appointments, as well as your optional message) in order to arrange and carry out the appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) as well as your consent (Art. 6(1)(a) GDPR).

The appointment data is stored on our hosting provider's server so that booked time slots are not assigned twice, and is automatically deleted no later than twelve months after the appointment. We send acknowledgement, confirmation and cancellation e-mails via Amazon SES (see the section “Contacting us”). The data is not passed on to any other third parties.

Providing information on how you heard about us is voluntary and serves solely to evaluate our advertising activities. If you access the appointment booking page via the short addresses bendit.de/flyer or bendit.de/unternehmen (QR codes on our brochures), we merely count the number of such visits per day – without IP address, cookies or any other personal data.