Data protection

We welcome you to visit our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU-DS-GVO) and the country-specific implementation laws that apply to us. With the help of this data protection declaration, we provide you with comprehensive information about the processing of your personal data by biX Consulting GmbH & Co. KG and your rights.

Personal data is the information that makes it possible to identify a natural person. This includes in particular your name, date of birth, address, telephone number, email address, but also your IP address.

Anonymous data is available if no personal reference can be made to the user.

Responsible body and data protection officer

Adress: biX Consulting GmbH & Co. KG, Christinenstraße 1, 40880 Ratingen

Contact information: www.bix-consulting.de, info@bix-consulting.de, Tel: +49 2102 875 46 00

Contact of the data protection officer:

Mr. Norbert Rauch, info@atarax.de.

Your rights as a data subject

First of all, we would like to take this opportunity to inform you about your rights as a data subject. These rights are standardized in Art. 15 - 22 EU GDPR. This includes:

• • The right to information (Art. 15 EU-DS-GVO),
  • The right to erasure (Art. 17 EU-GDPR),
  • The right to correction (Art. 16 EU-DS-GVO),
  • The right to data portability (Art. 20 EU GDPR),
  • The right to restriction of data processing (Art. 18 EU-DS-GVO),
  • The right to object to data processing (Art. 21 EU GDPR).

To assert these rights, please contact: datenschutz@bix-consulting.de or biX Consulting GmbH & Co.KG, Christinenstraße 1, 40880 Ratingen.

The same applies if you have any questions about data processing in our company. You also have the right to lodge a complaint with a data protection supervisory authority.

Right of objection

Please note the following in connection with the right to object:

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is associated with direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, if possible to: datenschutz@bix-consulting.de or biX Consulting GmbH & Co.KG, Christinenstraße 1, 40880 Ratingen.

In the event that we process your data to safeguard legitimate interests, you can object to this processing at any time for reasons that arise from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Purposes and legal basis of data processing

When processing your personal data, the provisions of the EU GDPR and all other applicable data protection provisions are observed. The legal basis for data processing results in particular from Art. 6 EU GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen customer relationships, which can also include analyzes for marketing purposes and direct advertising.

Your consent also constitutes a permission provision under data protection law. Here we clarify the purposes of data processing and your right of withdrawal. Should the consent also relate to the processing of special categories of personal data, we will expressly point this out to you in the consent, Art. 88 Para. 1 EU-GDPR.

Processing of special categories of personal data within the meaning of Art. 9 Paragraph 1 EU-DS-GVO only takes place if this is necessary due to legal regulations and there is no reason to assume that your legitimate interest in the exclusion of processing outweighs, Art. 88 Para. 1 EU-DS- GMO.

Right of objection

Please note the following in connection with the right to object:

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is associated with direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, if possible to: datenschutz@bix-consulting.de or biX Consulting GmbH & Co.KG, Christinenstraße 1, 40880 Ratingen.

In the event that we process your data to safeguard legitimate interests, you can object to this processing at any time for reasons that arise from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Purposes and legal basis of data processing

When processing your personal data, the provisions of the EU GDPR and all other applicable data protection provisions are observed. The legal basis for data processing results in particular from Art. 6 EU GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen customer relationships, which can also include analyzes for marketing purposes and direct advertising.

Your consent also constitutes a permission provision under data protection law. Here we clarify the purposes of data processing and your right of withdrawal. Should the consent also relate to the processing of special categories of personal data, we will expressly point this out to you in the consent, Art. 88 Para. 1 EU-GDPR.

Processing of special categories of personal data within the meaning of Art. 9 Paragraph 1 EU-DS-GVO only takes place if this is necessary due to legal regulations and there is no reason to assume that your legitimate interest in the exclusion of processing outweighs, Art. 88 Para. 1 EU-DS- GMO.

Transfer to third parties

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, it will not be passed on to third parties unless we are obliged to do so due to mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement authorities).

Recipients of the data / categories of recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In many cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection agreements have been concluded with all service providers. All of our suppliers guarantee through a contract for order data processing that address data will be deleted immediately after the order has been fulfilled (e.g. newsletter dispatch).

Third country transfer / intention to transfer third country

A data transfer to third countries (outside the European Union or the European Economic Area) only takes place if this is necessary for the implementation of the contractual relationship, is legally required or you have given us your consent.

Storage duration of the data

We store your data as long as it is required for the respective processing purpose. Please note that numerous retention periods require that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. commercial code, tax code, etc.). If there are no further retention requirements, the data will be routinely deleted after the purpose has been achieved.

In addition, we can store data if you have given us your permission to do so or if there are legal disputes and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

Secure transmission of your data

In order to best protect the data stored by us against accidental or deliberate manipulation, loss, destruction or access by unauthorized persons, we use appropriate technical and organizational security measures. The security levels are continuously checked in cooperation with security experts and adapted to new security standards.

The data exchange from and to our website is encrypted. We offer HTTPS as the transmission protocol for our website, using the current encryption protocols. There is also the option of using alternative communication channels (e.g. by post).

Obligation to provide the data

Various personal data are necessary for the establishment, implementation and termination of the contractual relationship and the fulfillment of the related contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have details on this in the above Point summarized for you. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or to carry out the underlying contractual relationship without providing this data.

Categories, sources and origin of the data

Which data we process is determined by the respective context: It depends on whether you

• • Place an order online or enter an inquiry in our contact form
  • send us an application
  • send us a complaint

Please note that we may also provide information for special processing situations separately at a suitable location, e.g. when uploading application documents or when making a contact request.

When you visit our website, we collect and process the following data:

• • Name of the Internet service provider
  • Information about the website from which you are visiting us
  • Web browser and operating system used
  • The IP address assigned by your Internet service provider (IP is anonymized)

For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is processed in accordance with Art. 6 Paragraph 1 lit. F EU-DS-GVO stored. An anonymization takes place immediately by shortening the IP address so that no reference is made to the user.

As part of a contact request, we collect and process the following data:

• • Name, first Name
  • Contact details
  • Form of address
  • Information on wishes and interests
  • Line of text

We collect and process the following data for newsletters:

• • Name, first Name
  • E-mail adress
  • Form of address