Privacy Policy

This English version is provided for convenience. In case of any discrepancy, the German version (Datenschutzerklärung) is legally binding.

Controller

BO4 Systems GbR
Mooshaldenweg 11
88069 Tettnang
Germany
Email: info@bo4.systems
Phone: +49 7542 7367
Authorised representatives: Andreas Bonin, Veronika Bonin

Overview of processing

The following overview summarises the types of data processed and the purposes of their processing and refers to the data subjects concerned.

Types of data processed

• Usage data.
• Meta, communication and procedural data.
• Contact data and content data (when contacting us by email or phone).

Categories of data subjects

• Users.
• Communication partners.

Purposes of processing

• Security measures.
• Provision of our online services and user-friendliness.
• Information technology infrastructure.
• Communication and responding to enquiries.

Relevant legal bases

Below is an overview of the legal bases of the GDPR on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection requirements may apply in your or our country of residence or registered office.

• Legitimate interests (Art. 6(1)(f) GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
• Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR) - Processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract.

National data protection regulations in Germany: In addition to the data protection provisions of the GDPR, national data protection regulations apply in Germany, in particular the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG) and the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz - TDDDG).

Note on the applicability of the GDPR and the Swiss FADP: This privacy notice serves to provide information both under the Swiss Federal Act on Data Protection (FADP; Schweizer DSG) and under the General Data Protection Regulation (GDPR). For reasons of broader territorial application and comprehensibility, the terms of the GDPR are used. However, where the Swiss FADP applies, the legal meaning of these terms continues to be determined in accordance with the Swiss FADP.

Security measures

In accordance with the legal requirements, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk. This includes, in particular, the encrypted transmission of this website via TLS (https).

Transfer of personal data

In the course of our processing of personal data, data may be transferred to service providers commissioned with IT tasks (e.g. our web host). In such cases, we comply with the legal requirements and, in particular, conclude corresponding data processing agreements.

No cookies, no tracking, no third-party content

This website does not set any cookies, does not use any analytics or tracking tools and does not embed any third-party content. Fonts and images are delivered exclusively from our own web server; no connection is made to external services such as Google Fonts. External links (e.g. to arcworx.net or veronika-bonin.de) are only accessed when clicked; the privacy notices of the respective provider apply there.

Provision of the online services and web hosting

We process users' data in order to be able to provide our online services to them. For this purpose, we process the user's IP address, which is necessary to transmit the content of our website to the user's browser or device.

• Types of data processed: Usage data (e.g. web pages visited, access times); meta, communication and procedural data (e.g. IP addresses, time information).
• Data subjects: Users (e.g. website visitors).
• Purposes of processing: Provision of our online services; information technology infrastructure; security measures.
• Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Collection of access data and log files: Access to our online services is logged in the form of so-called "server log files". Server log files may include the address and name of the web pages and files accessed, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user's operating system, the referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files are used for security purposes (e.g. to prevent overload attacks) and to ensure the stability and load balancing of the servers. Log file information is stored for a maximum of 30 days and then deleted or anonymised. Data whose further retention is required for evidentiary purposes is excluded from deletion until the respective incident has been finally resolved.

Web hosting: This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Hostinger processes the data mentioned above on our behalf on the basis of a data processing agreement (Art. 28 GDPR). Privacy policy: https://www.hostinger.com/legal/privacy-policy.

Contacting us

If you contact us by email or phone, we process the information you provide (e.g. name, contact details, content of the enquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). The data is deleted as soon as it is no longer required for handling the request and no statutory retention obligations prevent deletion. For email, we use Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland); processing in third countries (USA) cannot be ruled out and takes place on the basis of the EU-US Data Privacy Framework and standard contractual clauses.

Rights of data subjects

As a data subject, you have various rights under the GDPR, arising in particular from Art. 15 to 21 GDPR:

• Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.
• Right to withdraw consent: You have the right to withdraw any consent given at any time.
• Right of access: You have the right to obtain confirmation as to whether data concerning you is being processed and to access this data, as well as further information and a copy of the data in accordance with the legal requirements.
• Right to rectification: In accordance with the legal requirements, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
• Right to erasure and restriction of processing: In accordance with the legal requirements, you have the right to request that data concerning you be erased without undue delay or, alternatively, to request restriction of the processing of the data.
• Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with the legal requirements, or to request its transmission to another controller.
• Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW).