Privacy

Privacy Policy (Datenschutzerklärung)

1. Introduction

We take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, and protect your data in compliance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Data Controller

Controller pursuant to Art. 4(7) GDPR:
BSF – Benchmarking for Sustainable Futures UG (haftungsbeschränkt)
Hamburg, Germany
Email: info@bsf-international.com

3. Data We Process

When you visit our website, we may collect the following data automatically:

• IP address (anonymized if possible)
• Date and time of access
• Pages visited
• Browser type and version
• Referrer URL
• Operating system
  
  

We also collect personal data when you contact us by email or phone (name, contact details, message content).

4. Purpose and Legal Basis

We process personal data for:

• Ensuring website functionality and security (Art. 6(1)(f) GDPR – legitimate interest)
• Responding to inquiries (Art. 6(1)(b) GDPR – pre-contractual/contractual measures)
• Compliance with legal obligations (Art. 6(1)(c) GDPR)
• Analytics/marketing (only with consent – Art. 6(1)(a) GDPR)
  
  

5. Cookies and Tracking

If we use cookies, analytics tools (e.g., Google Analytics), or marketing pixels, we will ask for your consent via a cookie banner before placing non-essential cookies. You can revoke consent at any time.

6. Data Retention

We store personal data only as long as necessary to fulfill the stated purposes or as legally required. Server log files are automatically deleted after a short retention period (typically 7–14 days).

7. Data Sharing

We only share data with:

• Technical service providers (e.g., hosting, email services) under strict GDPR-compliant contracts
• Authorities, if legally required
  
  

8. Data Security

We apply state-of-the-art technical and organizational measures (TOMs) to secure your data against loss, misuse, and unauthorized access.

9. International Data Transfers

If data is transferred outside the EU/EEA, we ensure compliance with Art. 44 ff. GDPR via adequacy decisions or standard contractual clauses.

10. Your Rights

You have the right to:

• Request access to your data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Request deletion (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Receive your data in a portable format (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR)
  
  

Please contact info@bsf-international.com to exercise your rights.

11. Supervisory Authority

You have the right to lodge a complaint with the competent data protection authority:
Hamburg Commissioner for Data Protection and Freedom of Information
Website: https://datenschutz-hamburg.de

12. Updates

We reserve the right to update this Privacy Policy in order to remain compliant with legal requirements or reflect changes in our services.

‍