Privacy Policy

1. Data Controller

Betzler Group B.V. acts as the data controller for the personal data we collect. If you have any questions or concerns regarding the processing of your personal data, please contact us at [contact information].

2. Collection and Use of Personal Data

We may collect and process the following categories of personal data for the following purposes:

• Server Logfiles including IP-Addresses, Date and time of the access, Browser type and version, User’s operating system, Referrer-URL (the previously visited website), which we will store based on our „legitimate interest” (see below in Sec. 3) for a period of 30 days. The purpose is the administration of the website
• You inquiry which you send us via the contact formula on the website or via an E-mail stated on the website (including all the personal data you put in your inquiry). The legal basis and the purpose for this processing activity is our legitimate interest to answer your questions. We will keep the respective data until the response to your request is finally completed.
• We collect and process your email address when you subscribe to our newsletter for the purpose of being able to send the newsletter to you. We do this based on your consent. We will keep the data until you unsubscribe to our newsletter.

3. Lawful Basis for Processing

We will only process your personal data when we have a lawful basis to do so, which may include:

• Consent: We will obtain your explicit consent before processing your personal data.
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided it does not override your rights and interests.

See above under Sec. 2 for the applicable legal basis for each processing activity.

4. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. When determining the appropriate retention period, we consider the nature and sensitivity of the personal data, the purposes for which we process it, and any legal or regulatory obligations. See above under Sec. 2 for the specific retention period of each processing activity.

5. Data Security

We implement technical and organizational measures to ensure a level of security appropriate to the risk involved in processing your personal data. These measures aim to protect your personal information against unauthorized access, disclosure, alteration, or destruction.

6. Sharing of Personal Data

We may share your personal data with the external company that hosts our website, if this is technically necessary.

We ensure that any third-party service providers or partners we engage with adhere to appropriate data protection standards and provide sufficient guarantees regarding the confidentiality and security of your personal data.

7. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place to protect your data. This may include the use of standard contractual clauses approved by the European Commission..

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access: You have the right to request access to the personal data we hold about you.
• Right to rectification: You can request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request the deletion of your personal data under certain circumstances.
• Right to restrict processing: You can request the limitation of processing your personal data in certain situations.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another data controller.
• Right to object: You can object to the processing of your personal data in certain circumstances.
• Right to withdraw consent: If we rely on your consent for processing, you have the right to withdraw it at any time.

To exercise your rights or if you have any privacy-related inquiries, please contact us using the details provided in this policy.

9. Changes to this Privacy Policy

We may update this privacy policy from time to time to reflect changes in our privacy practices. Any updates will be posted on our website, and we encourage you to review this policy periodically.

To accurately complete the privacy policy template and ensure compliance, you'll need to collect the following company information:

1. Company Name: The full legal name of your company or organization.

2. Contact Information: Provide a means for individuals to contact your company regarding privacy-related inquiries. This may include:

• Postal address
• Email address
• Phone number

3. Data Controller: Specify the legal entity that determines the purposes and means of processing personal data. In most cases, this will be your company.

Categories of Personal Data: Identify the types or categories of personal data you collect from individuals. This can vary depending on your business operations, but some common examples include:

• Name
• Email address
• Postal address
• Phone number
• Billing information
• IP address
• Geolocation data
• Device information

5. Purposes of Data Processing: Outline the specific purposes for which you collect and process personal data. Examples may include:

• Customer support and communication
• Marketing and promotional activities
• Analyzing website usage and improving user experience
• Compliance with legal obligations

6. Lawful Basis for Processing: Determine the lawful basis under which you process personal data. Common bases include:

• Consent
• Contractual necessity
• Legitimate interests
• Legal obligation

7. Data Retention Period: Establish how long you will retain personal data before securely deleting or anonymizing it. This should be based on the purposes of data processing and any legal or regulatory requirements.

8. Data Security Measures: Identify the technical and organizational measures you have implemented to safeguard personal data. This may include encryption, access controls, employee training, regular security assessments, etc.

9. Recipients of Personal Data: Specify the categories of recipients with whom you may share personal data. This can include:

• Third-party service providers (e.g., payment processors, shipping companies)
• Business partners and affiliates
• Regulatory authorities (if required by law)

10. International Data Transfers: If you transfer personal data outside the European Economic Area (EEA), describe the safeguards you have in place to ensure an adequate level of protection, such as using standard contractual clauses or relying on approved mechanisms like the Privacy Shield framework (if applicable).