Privacy policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and the UK GDPR is:

Brunotec GmbH
Wittelsbacherstraße 13a
10707 Berlin
Germany

Phone: +49 151 64008517
Email: info@brunotec.com

2. General Information

We take the protection of your personal data very seriously. Personal data is processed exclusively in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR.

Personal data means any information relating to an identified or identifiable natural person.

3. Processing When Visiting the Website

a) Server Log Files

When you visit our website, the hosting provider automatically collects and stores information in so-called server log files, including:

• IP address
• date and time of the request
• accessed page or file
• referrer URL
• browser type and operating system

Purpose:
Ensuring the technical operation, security and stability of the website.

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)

4. Cookies and Consent Management

Our website uses cookies. Cookies are small text files that are stored on your device.

We use:

• technically necessary cookies, and
• optional cookies (e.g. for analytics).

Optional cookies are only set after you have given your explicit consent via a consent management tool.

Legal bases:

• Art. 6(1)(f) GDPR (technically necessary cookies)
• Art. 6(1)(a) GDPR (consent)

You may withdraw your consent at any time via the cookie settings.

5. Web Analytics

If you have given your consent, we use web analytics tools to analyse the use of our website.

The following data may be processed:

• shortened IP address
• visit duration
• pages accessed
• technical device information

Data is processed in anonymised or pseudonymised form.

Legal basis:
Art. 6(1)(a) GDPR (consent)

6. Contact Requests

If you contact us by email or via a contact form, we process the personal data you provide (e.g. name, email address, message content).

Purposes:

• responding to enquiries
• pre-contractual communication

Legal bases:

• Art. 6(1)(b) GDPR
• Art. 6(1)(f) GDPR

7. Applicant Data

If you apply for a position with us, we process your application data (e.g. CV, contact details).

Purpose:
Carrying out the recruitment process.

Legal basis:
Art. 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

Applicant data is deleted after completion of the recruitment process, unless statutory retention obligations apply.

8. Cloud Services and Microsoft 365

We use cloud-based services for email, document management and collaboration (e.g. Microsoft 365).

Personal data may be processed in this context.

Safeguards:

• data processing agreements in accordance with Art. 28 GDPR
• EU Standard Contractual Clauses
• appropriate technical and organisational measures

Legal bases:
Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR

9. Recipients and Data Processors

Personal data is only disclosed if:

• required for the performance of a contract
• required by law
• data processors are engaged in accordance with Art. 28 GDPR

10. Transfers to Third Countries

Transfers of personal data to countries outside the EU or EEA only take place if:

• an adequate level of data protection is ensured, or
• appropriate safeguards (e.g. Standard Contractual Clauses) are in place.

11. Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purposes or as required by statutory retention obligations.

12. Rights of Data Subjects

You have the right to:

• access your personal data (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

You may exercise your rights at any time by contacting us.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

14. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or disclosure.

15. UK GDPR

Where personal data of individuals in the United Kingdom is processed, such processing is carried out in accordance with the UK GDPR.

16. Amendments

We reserve the right to amend or update this Privacy Policy at any time.

The version published on the website at the time of access shall apply.