Privacy Policy

1. Data Controller

BOLD & EPIC Transform GmbH
Leuschnerstraße 44
70176 Stuttgart
Germany
Email: info@boldandepic-transform.com

2. Data Protection Officer

We have not appointed a Data Protection Officer.
If you have any questions, please contact us using the contact information provided above.

3. General Information on Data Processing

We place a high priority on protecting your personal data.
We process your data exclusively in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications and Digital Services Data Protection Act (TDDDG).
Personal data refers to any data that can be used to personally identify you.

4. Withdrawal of Your Consent

To the extent that we base our processing on your consent, you may revoke it at any time with future effect.
The lawfulness of the processing carried out prior to revocation remains unaffected.
You can revoke your consent at any time via the cookie settings on our website.

5. Data Collection When Visiting the Website (Server Log Files)

When you visit our website, information is automatically collected by the web server:

  • IP address
  • Date and time of the request
  • Browser type and version
  • Operating system
  • Referrer URL

Purpose:
To ensure stable and secure operation of the website

Legal basis:
Art. 6(1)(f) GDPR

Retention period: 7 days

6. Hosting

Our website is hosted by DigitalOcean, LLC.
Personal data (e.g., IP addresses in server log files) is processed for the purpose of providing and delivering the website.

Legal basis:
Art. 6(1)(f) GDPR

Transfers to third countries:
A transfer to the United States cannot be ruled out.
This is carried out on the basis of the EU-U.S. Data Privacy Framework as well as on the basis of Standard Contractual Clauses (SCCs).

7. Cookies, Consent Management, and Consent Log

We use technologies to store or read information on your device (e.g., cookies).
Unless technically necessary, this is done only with your consent.
We use Cookiebot (Usercentrics A/S, Denmark) to obtain, manage, and document your consents.

In particular, the following data is processed:

  • Consent status
  • Time of decision
  • Technical device information

Legal basis:

  • Section 25(2)(2) TDDDG
  • Art. 6(1)(c) GDPR (duty to provide evidence)
  • Art. 6(1)(f) of the GDPR

8. Web Analytics with Google Analytics

Provided you have given your consent, we use Google Analytics (Google Ireland Limited, Ireland) to analyze the use of our website.

Data processed:

  • Usage data (e.g., page views, click paths)
  • Device and browser information
  • Approximate location data
  • Online identifiers (e.g., cookie IDs)

Legal basis:

  • Art. 6(1)(a) GDPR
  • Section 25(1) TDDDG

Note on IP addresses:
In Google Analytics 4, IP addresses of users in the EU are neither logged nor stored.

Recipients / Processing:
Google processes data as a data processor.

Transfers to third countries:
Data may be transferred to the U.S. based on the EU-U.S. Data Privacy Framework and, additionally, on the basis of Standard Contractual Clauses (SCCs).

Retention period: 14 months

9. Contacting Us

If you contact us via email, your information will be stored for the purpose of processing your inquiry.

Legal basis:
Art. 6(1)(b) GDPR

Retention period:
Until your inquiry has been fully processed and for an additional 6 months thereafter, provided that no statutory retention requirements preclude this.

10. Recipients of Personal Data

We use service providers (processors), in particular for:

  • Hosting (DigitalOcean)
  • Consent management (Cookiebot)
  • Web analytics (Google Analytics)

These service providers process data exclusively in accordance with our instructions.

11. Retention Period (General)

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations.

12. Your Rights

You have the right at any time to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)

13. Right to File a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.
Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg

14. Provision of Data

Providing personal data may be necessary to use certain features (e.g., contacting us).
Without this data, we may not be able to process your request.

15. Automated Decisions

No automated decision-making or profiling takes place.