Privacy policy.

Unless stated otherwise below, providing your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide data; not providing it has no consequences. “Personal data” means any information relating to an identified or identifiable natural person.

Controller

The controller for data processing on this website is BBE&L International GmbH, Berliner Straße 57, 14169 Berlin, Germany, e-mail: info@bbe-l.de. Further details are provided in the imprint.

Server log files

You can visit our website without providing personal details. On every access, usage data is transmitted by your browser to us or our hosting/IT provider and stored in server log files (e.g. page requested, date and time, IP address, data volume, requesting provider). Processing is based on Art. 6(1)(f) GDPR on our overriding legitimate interest in the fault-free operation and improvement of our website.

Contact by e-mail and contact form

If you contact us by e-mail or via the contact form, we collect your personal data (company, name, role if provided, e-mail address, phone if provided, message) only to the extent you provide it, for the purpose of handling and answering your enquiry.

To process your enquiry, the form data is transferred via our self-hosted automation platform (n8n) to our internal task management system (Jira, Atlassian) and stored there as a ticket. These systems are used solely for the structured handling of your enquiry; data is not passed to uninvolved third parties.

Where contact serves pre-contractual measures or an existing contract, processing is based on Art. 6(1)(b) GDPR; otherwise on Art. 6(1)(f) GDPR on our overriding legitimate interest in handling your enquiry. You may object to processing based on Art. 6(1)(f) GDPR at any time. Data is deleted after final handling, subject to statutory retention periods.

To prevent abuse, the form uses technical measures (an invisible control field, a signed timestamp, and a per-IP request limit); the IP address is processed briefly for abuse prevention (Art. 6(1)(f) GDPR).

Cookies and consent management

Our website uses cookies. Technically necessary cookies make our website user-friendly, effective and secure (legal basis: §25(2) German TDDDG and Art. 6(1)(f) GDPR).

Consent is managed by a self-built consent banner (no external service). Your choice (“Accept all” / “Necessary only”) is stored in a cookie named “bbe-consent” for 12 months; no data is transmitted to third parties. You can change your choice at any time via the “Cookie settings” link in the footer.

Technically necessary cookies on this site are: “bbe-consent” (your cookie choice, 12 months), a possible language-hint cookie, and — only inside the protected brand portal — a session cookie (see below).

Web analytics with Google Analytics 4

Only after your explicit consent do we use Google Analytics 4 by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We deploy it with Consent Mode v2: without consent, no analytics cookies are set and no data is sent to Google; the analytics script is loaded only after opt-in via the consent banner. Data processed may include a truncated IP address, date/time of access, pages visited, browser/device information and interaction events (e.g. scroll depth, contact form submission).

Information generated is usually transferred to and stored on Google servers, which may involve transfers to the USA, based on the EU standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. Legal basis: §25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You can withdraw consent at any time with future effect via “Cookie settings” in the footer by choosing “Necessary only”. See https://policies.google.com/privacy for details.

Brand portal (protected area)

For invited brands and distributions we provide a password-protected brand portal. At login, your username and password are transmitted server-side only to our internal validation system; passwords are never stored or logged on this website.

After successful login, we set a technically necessary session cookie (httpOnly, Secure) containing signed session information (assigned distribution and validity, max. 24 hours), used solely to maintain your signed-in session. Legal basis: Art. 6(1)(b) GDPR and §25(2) TDDDG. Login attempts are limited per IP address to prevent abuse (Art. 6(1)(f) GDPR). Portal pages are not indexed by search engines and contain no brand-related analytics events.

Data subject rights and storage period

After complete handling of a matter, data is stored for the duration of any warranty or evidence periods, then in line with statutory retention periods (in particular tax and commercial law) and deleted thereafter, unless you have consented to further processing.

Where the legal requirements are met, you have the rights under Art. 15–20 GDPR (access, rectification, erasure, restriction, data portability) and the right to object under Art. 21(1) GDPR to processing based on Art. 6(1)(f) GDPR. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).