Privacy Policy

1) Introduction and Controller Contact Details

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when you use our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is BIEGEMASTER | Sperr & Lechner GmbH & Co. KG, Hertlingweg 26, 74613 Öhringen-Ohrnberg, Germany, Tel.: +49 (0)7948 94 19 97 – 0, Fax: +49 (0)7948 94 19 97 – 30, Email: biegemaster@biegemaster.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, that is, if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (where applicable, in anonymized form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review the server log files retrospectively should specific indications point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries addressed to the controller), this website uses SSL or TLS encryption. You can identify an encrypted connection by the character string “https://” and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

For the hosting of our website and the display of the website content, we use a provider that renders its services, either itself or through selected subcontractors, exclusively on servers within the European Union.

All data collected on our website is processed on these servers unless different data recipients are identified below for specific processing activities.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your terminal device. Some of these cookies are automatically deleted after the browser is closed (so-called “session cookies”), while some remain on your terminal device for a longer period and enable website settings to be stored (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of your web browser’s cookie settings.

Insofar as personal data is also processed by individual cookies used by us, the processing is carried out pursuant to Art. 6(1)(b) GDPR either for the performance of the contract, pursuant to Art. 6(1)(a) GDPR where consent has been granted, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the website visit.

You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or so that you can exclude the acceptance of cookies in certain cases or generally.

Please note that the functionality of our website may be restricted if cookies are not accepted.

5) Contacting Us

Personal data is collected when you contact us (e.g., via a contact form or email). The data collected when a contact form is used is evident from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been conclusively addressed. This is the case when the circumstances indicate that the matter in question has been conclusively resolved and provided that no statutory retention obligations prevent deletion.

6) Use of Customer Data for Direct Advertising

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. The provision of additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will send you an email newsletter only after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm, by clicking an appropriate link, that you wish to receive the newsletter in the future.

By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. When you subscribe to the newsletter, we store the IP address entered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter is used exclusively for the purpose of advertising communications by means of the newsletter. You may unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending an appropriate message to the controller identified at the beginning of this Privacy Policy. After you unsubscribe, your email address will be deleted from our newsletter distribution list without undue delay, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Privacy Policy.

6.2 MailChimp

Our email newsletters are sent via the following provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data you provide when subscribing to the newsletter to this provider pursuant to Art. 6(1)(f) GDPR so that the provider can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also performs a statistical analysis of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. In this process, terminal device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but is not combined with other data sets.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

7) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies that are stored on your terminal device as small text elements and collect certain information. The scope of this information also includes your IP address, which, however, is truncated by Google by the final digits in order to prevent direct attribution to a person.

The information is transmitted to Google servers and further processed there. This may also involve transfers to Google LLC, which is based in the United States.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website and Internet use. The IP address transmitted by your browser and truncated within the scope of Google Analytics is not combined with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the terminal device used, takes place only if you have granted us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw the consent you have granted at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information regarding Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google Analytics 4 uses the special “demographic characteristics” function and can use it to create statistics containing statements about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the data collected cannot be attributed to a specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to enable cross-device reports to be generated. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including models concerning cross-device conversions. We do not receive any personal data from Google, but only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized advertising” function in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

User IDs
As an extension to Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

8) Website Functions

8.1 Applications for Job Vacancies by Email

On our website, we advertise currently vacant positions in a separate section, for which interested persons may apply by email to the contact address provided.

Applicants must provide all personal data necessary for a well-founded assessment, including general information such as name, address, and contact details, as well as evidence relating to qualifications and performance and, where applicable, health-related information. Details concerning the application can be found in the job posting.

Upon receipt of the application by email, the data is stored and evaluated exclusively for the purpose of processing the application. If we have any questions, we use either the applicant’s email address or telephone number. Processing is carried out on the basis of Art. 6(1)(b) GDPR (or Section 26(1) BDSG), within the meaning of which participation in the application procedure is deemed to constitute steps taken prior to entering into an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR (e.g., health data such as information concerning severe disability status) are requested from applicants in the course of the application procedure, processing is carried out pursuant to Art. 9(2)(b) GDPR so that we can exercise the rights and comply with the obligations arising from employment law and social security and social protection law.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9(1)(h) GDPR if it is carried out for purposes of preventive or occupational medicine, for the assessment of the applicant’s working capacity, for medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services.

If the applicant is not selected or if an applicant withdraws the application prematurely, the applicant’s transmitted data and all electronic correspondence, including the application email, will be deleted no later than 6 months after the applicant has been notified accordingly. This period is determined on the basis of our legitimate interest in being able to answer any follow-up questions regarding the application and, where applicable, to comply with our obligations to provide evidence under the provisions governing the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (where processing takes place in Germany, in conjunction with Section 26(1) BDSG) for the purpose of carrying out the employment relationship.

8.2 Online Applications via a Form

On our website, we advertise currently vacant positions in a separate section, for which interested persons may apply using an appropriate form.

Applicants must provide all personal data necessary for a well-founded assessment, including general information such as name, address, and contact details, as well as evidence relating to qualifications and performance and, where applicable, health-related information. Details concerning the application can be found in the job posting.

When the form is submitted, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us, and evaluated exclusively for the purpose of processing the application. Processing is carried out on the basis of Art. 6(1)(b) GDPR (or Section 26(1) BDSG), within the meaning of which participation in the application procedure is deemed to constitute steps taken prior to entering into an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR (e.g., health data such as information concerning severe disability status) are requested from applicants in the course of the application procedure, processing is carried out pursuant to Art. 9(2)(b) GDPR so that we can exercise the rights and comply with the obligations arising from employment law and social security and social protection law.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9(1)(h) GDPR if it is carried out for purposes of preventive or occupational medicine, for the assessment of the applicant’s working capacity, for medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services.

If the applicant is not selected or if an applicant withdraws the application prematurely, the applicant’s data transmitted via the form and all electronic correspondence, including the application email, will be deleted no later than 6 months after the applicant has been notified accordingly. This period is determined on the basis of our legitimate interest in being able to answer any follow-up questions regarding the application and, where applicable, to comply with our obligations to provide evidence under the provisions governing the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (where processing takes place in Germany, in conjunction with Section 26(1) BDSG) for the purpose of carrying out the employment relationship.

9) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they access the website in the form of an interactive user interface on which consent can be granted for specific cookies and/or cookie-based applications by checking the corresponding boxes. Through use of the tool, all cookies/services requiring consent are loaded only if the respective user grants the corresponding consent by checking the boxes. This ensures that such cookies are set on the respective user’s terminal device only where consent has been granted.

The tool sets technically necessary cookies in order to store your cookie preferences. As a general rule, personal user data is not processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning, or logging cookie settings, such processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in a legally compliant design of our website.

A further legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user’s consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information regarding the operator and the configuration options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

10) Rights of the Data Subject

10.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions governing the exercise of these rights:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing, and, where applicable, additionally on the basis of the respective statutory retention period (e.g., retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods exist for data processed in connection with legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods expire, provided that it is no longer required for the performance of or steps prior to entering into a contract and/or we have no continuing legitimate interest in further storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this Privacy Policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

© IT-Recht Kanzlei

Last updated: 21.08.2026, 01:23:50