Data privacy
Data protection information in accordance with Art. 13 GDPR
Version: 03.2025
The protection of your data is important. At B.PRO GmbH, we would therefore like to take this opportunity to inform you about how we process your data and what rights you are entitled to with regard to data processing. This information on data processing informs you about data processing when you visit this website.
The object of data protection is personal data. This is understood as individual details about personal or material circumstances of a specific or identifiable natural person or, in accordance with Art. 4 of the GDPR, all information relating to an identified or identifiable person. The term personal data includes, for example, information such as names, addresses, email addresses or telephone numbers, but also usage data such as your IP address or content data such as the cover letter you have created or your CV.
I. Name and contact details of the data controller
The data controller responsible for processing is:
B.PRO GmbH
Flehinger Str. 59
75038 Oberderdingen
Germany
Phone: +49 (0)7045 448 1900
II. Name and contact details of the data protection team and data protection officer
If you have any questions about data protection, please contact our data protection team at the above postal address for the attention of the Data Protection Team, or by sending an email to: datenschutz@bpro-solutions.com
You can contact our data protection officer at the above postal address for the attention of the Data Protection Officer, or by sending an email to: datenschutzbeauftragter@blanc-fischer.com
III. Purpose and legal basis of data processing
1. Data collection on the website
For security reasons and to protect the transmission of confidential content, we use SSL or TLS encryption on our website. Enquiries can be sent securely via the contact form or orders can be placed via the website. You can recognise SSL or TLS encryption by the addition of "https://" in the address bar of the Internet browser and the closed padlock symbol next to it.
If SSL or TLS encryption is activated, data can be transmitted to us via the website without being read by third parties.
If you use our website for information purposes only – in other words, if you do not register or otherwise provide us with information – we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymised form)
The processing is carried out in accordance with Section 25 para. 2 of the Federal Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6 para. 1 sentence 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
2. Cookies
We use a limited number of cookies on our website. Cookies are small text files that a website stores on the computer used by the visitor, in other words locally. Cookies facilitate the use of the website.
You can find out exactly which cookies we use by accessing Settings in your Internet browser, clicking on Additional Settings if necessary, and then on Content Settings and/or Cookie Management (each individual browser software has a slightly different menu).
You can prevent the installation of cookies by selecting the appropriate settings in your browser software to stop cookies being installed (these can be found in most browsers in Settings). If you do this, you may not be able to fully use all functions of our website.
We use different categories of cookies on this website: essential cookies, without which the functionality of our website would be limited, and optional functional and marketing cookies, which generally originate from third-party providers:
2.1. Essential cookies
These cookies are essential to enable you to move around our website and use its functions. For example, they store which products you have placed in your shopping basket, the progress of your order process and whether you agree to the use of cookies and your selection in the cookie settings. These cookies are usually session-specific and expire after your visit to the website (session), unless the respective functionality requires storage beyond this (e.g. saving the cookie setting). Deactivating this category of cookies would restrict the functions of the website as a whole or parts of it. The legal basis for the use of essential cookies and the processing of your data by these cookies is our legitimate interest in displaying the functions of our website to you and making them available for use, Section 25 (2) of the TDDDG in conjunction with Art. 6 (1) sentence 1 lit. f GDPR. Art. 6 para. 1 sentence 1 lit. f GDPR.
2.2. Functional cookies
We use functional cookies to improve and simplify the use and performance of our website.
The legal basis for the use of functional cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can access and revoke your consent at any time in the Cookie preferences in the footer of the website or via the fingerprint.
2.3. Marketing cookies
Marketing cookies are used to target and analyse advertising more specifically to you and your interests. They are also used to limit how often you see the same advert, measure the effectiveness of an advertising campaign and to understand people's behaviour after viewing an ad. These cookies are usually placed on websites by advertising networks with the consent of the website operator (i.e. us in this case). They recognise that a user has visited a website and pass this information on to others, e.g. advertising companies, or adapt advertising themselves accordingly. They are often linked to a website functionality provided by this company. We use them with the aim of tailoring advertising on other websites to you and providing the advertising networks we use with information about your visit so that you can later be presented with advertising that is potentially of real interest to you based on your browsing behaviour.
The legal basis for the use of marketing cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can access and revoke your consent at any time in the Cookie preferences in the footer of the website or via the fingerprint.
2.4. List of essential, functional and marketing cookies
You can view the list of cookies we use and the providers that receive personal data from you with the help of cookies in the Cookie preferences in the footer of the website or via the fingerprint. There you will find further information on the individual providers and cookies.
If you would like to receive further information from us about these cookies, please use the contact details specified in Section I.
2.5. How can I declare or revoke my consent to cookies?
If you are visiting our website for the first time, you will be shown the data protection notice with the consent text for optional cookies on your homepage. By clicking on the individual categories (essential, functional and marketing cookies) and then confirming by clicking on "Accept all" or "Save settings", you agree to the setting of these cookies. You can access and revoke your consent at any time in the Cookie preferences in the footer of the website or via the fingerprint.
Your consent is voluntary and can be revoked at any time with effect for the future. To do this, change your cookie settings under Cookie preferences in the footer of the website or via the fingerprint.
3. Contacting us (service and other enquiries by email, telephone or contact form)
Personal data is collected when you contact us (e.g. via contact form, email or telephone). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request and service or for contacting you and the associated technical administration.
The legal basis for the processing of this personal data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract or in the case of service enquiries, the additional legal basis for the processing of this personal data is Art. 6 para. 1 sentence 1 lit. b GDPR.
Your data will only be processed until it is no longer required to fulfil the purpose and will be deleted once your enquiry has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
4. Registration of a customer account (B2B) – Partner portal
If you register for a personal customer account, we process the registration data, which can be seen from the respective input forms, to set up and manage your customer account and to process future orders. As a registered customer, you have access to your personal customer account (using your email address and the password you have chosen), in which you can manage your purchases, view your order history and save and change your personal settings (e.g. password settings, billing and delivery addresses, etc.).
The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR to provide you with the customer account service described above or to fulfil a usage contract with you (Art. 6 para. 1 sentence 1 lit. b GDPR).
This data is deleted if the registration on our website is cancelled or changed or the customer account is terminated. If deletion is not possible for legal reasons, the respective data will be blocked instead. Please note that we may have to store the data relating to the orders visible in your customer account for longer due to statutory retention obligations.
Right of objection
Insofar as your personal data is processed to protect legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of this data at any time for reasons arising from your particular situation in accordance with Art. 21 GDPR. In this case, we will cease the processing of this personal data unless we can demonstrate compelling legitimate grounds for the processing. To do this, please go to the "My data and documents" tab in your customer account and delete your customer account there.
5. Orders in the online shop (B2B) – Partner portal
If you wish to order goods via our online shop, you must be a registered and verified customer with a customer account. When you place an order, the data entered by you and the data relating to you (e.g. information from your order, delivery and billing address, telephone number, email address, payment methods, delivery methods, order information, company name and VAT ID) are processed. We also collect information about the time, scope and, if applicable, location of your order in the online shop.
We process your order data in order to manage your order, check the sanctions list, check creditworthiness and deliver the ordered goods as well as for customer service required with the order and pass this on to corresponding delivery and payment service providers to fulfil the purposes. The registration of a customer account is voluntary and does not have to be created.
The legal basis for the processing is the conclusion and fulfilment of the purchase contract for the ordered goods pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR or the legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the registration of a customer account.
This data is deleted when it is no longer required for the fulfilment of the contract (including customer service and warranty), unless we are legally obliged to store it, e.g. due to retention obligations under commercial or tax law.
6. Newsletter subscription
You can subscribe to a free newsletter on our website. The data collected during registration will be processed (the data displayed as mandatory fields are required for receipt, data marked as voluntary are only used for a more personalised approach and selection of the information displayed).
We will contact you by email with information, offers and promotions on B.PRO products tailored to you and your interests or use, either on the basis of your express consent or – if you purchase similar goods or services from us and provide your email address – without separate consent.
We use the so-called double opt-in procedure to register for our newsletter. This means that once you have registered, we will send you an e-mail to the e-mail address that you indicated asking you to confirm that you would like to receive the newsletter. If you do not confirm your subscription within four days, your information will be blocked and automatically erased after one month. We will also save the IP address that you used and the time when you subscribed and when you confirmed subscription. This process is designed to verify your subscription and any possible misuse of your personal data.
The only mandatory information for sending the newsletter is your email address. Any other, separately marked data that you provide is supplied on a voluntary basis and subsequently used to address you personally. After receiving your confirmation, we will save your email address to use it to send the newsletter. The legal basis for the processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
Revocation of consent:
You can revoke the use of your personal data for these purposes at any time with effect for the future and unsubscribe from the newsletter. Please use the corresponding functions provided for you within your account or via the unsubscribe function within the respective newsletter email. The lawfulness of the processing up to the time of cancellation is not affected by this.
This data will be deleted or only stored in aggregated, anonymised form after your objection or revocation of any consent given or otherwise at the latest after the end of use by us. If necessary, we will store your objection in order to prevent you from being contacted further.
In principle, the data is processed by B.PRO GmbH. We also use service providers such as snapADDY and SAP, which provide us with appropriate software for the implementation and management of the newsletter. Another recipient is our sister company, Blanc und Fischer IT Services GmbH, which supports us in maintaining the IT infrastructure and provides software applications. Corresponding order processing contracts have been concluded in accordance with Art. 28 of the GDPR. Data transfer to a third country is not planned.
We would like to point out that we evaluate your user behaviour when sending the newsletter. The emails we send contain what are known as web beacons or tracking pixels, which consist of single-pixel image files stored on our website. We interlink the data specified in Paragraph 3 and the web beacons with an individual ID for evaluations. The links contained in the newsletter also contain this ID. The data is collected exclusively in pseudonymised form, i.e. the IDs are not linked to your other personal data, and direct personal references are excluded.
This tracking provides us with information about users’ reading behaviour, enabling us to adapt the newsletter to users’ preferences more effectively and thus offer a better, more informative product. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
The information is stored for as long as you have subscribed to the newsletter. Your data will be then be deleted, unless there is a legal obligation to retain it for verification purposes. In this case, your data will be deleted after expiry of the statutory retention obligations. By unsubscribing, you will no longer receive our newsletter. After unsubscribing, your data may be stored anonymously for statistical purposes. However, it will no longer be possible to identify your person.
Such tracking is not possible if you have disabled the display of images in your email program by default. In such a case, the newsletter is not displayed in full and you may not be able to use all of its functions. If you activate image display manually, usage is tracked as described above. Links are also tracked when you do not display images.
7. Social media (LinkedIn, Instagram)
To increase our online presence, we use social media platforms to report on products and the company and to enter into dialogue with customers, suppliers, employees, interested parties and applicants. In doing so, we also process personal data. In principle, data processing is based on the regulations of the social media platform. Data processing is carried out by the operators of the platform. You can find more details in the data protection declarations of the operators:
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• Instagram: https://de-de.facebook.com/about/privacy
We process personal data for the following purposes
1. Public relations work within the meaning of Art. 6 para. 1 lit. f GDPR
2. Public image building within the meaning of Art. 6 para. 1 lit. f GDPR
3. Statistical analysis of user behaviour for optimisation and marketing purposes within the meaning of Art. 6 para. 1 lit. f GDPR
4. Viewing and responding to posts sent/posted to our company page, in groups, posts or news feeds managed by us (Art. 6 para. 1 f GDPR)
5. Viewing and responding to contact requests sent to us via the platforms (Art. 6 para. 1 f GDPR)
6. Processing of surveys with the express consent of the user (Art. 6 para. 1 a GDPR) or on the basis of a legitimate interest (Art. 6 para. 1 f GDPR)
7. Processing of competitions to check the specified participation criteria, to share or post the transmitted content required for participation (e.g. videos or images), to draw winners and provide the prize. This is done with express consent (Art. 6 para. 1 a GDPR) or on the basis of pre-contractual measures (Art. 6 para. 1 b GDPR).
In principle, data processing only takes place within the social media platform. Any use outside the platform will only take place if it is absolutely necessary for the fulfilment of the purpose or to process a request made by you.
If the data is processed on the basis of a legitimate interest, this is done out of our interest in implementing measures for business management and the further development of services and products, to realise advertising measures for our own or Group-wide services and products and to deal with your enquiries, complaints, claims or other concerns.
The data will be deleted in accordance with the rules of the social media platforms or with the deletion of a group of an advertising measure or a post. Data from participants in a survey or from participants in a competition will be deleted at the end of the process, unless other information has been accepted in a declaration of consent or statutory retention obligations apply.
7.1. Additional declaration on LinkedIn Insights
We are jointly responsible with LinkedIn for the processing of Insights data. The details of the responsibilities can be found at https://legal.linkedin.com/pages-joint-controller-addendum.
LinkedIn agrees to assume primary responsibility under the GDPR for the processing of Insights data and to fulfil all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, LinkedIn will make the essence of this Page Insights supplement available to the data subjects.
7.2. Additional declaration for Instagram
We are jointly responsible with Meta Platforms Ireland Limited ("Meta Ireland") for the processing of Insights data on Instagram. Information about data processing by Meta can be found in Meta's privacy policy at https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 The details of the joint responsibilities can be found at https://de-de.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendum.
Meta Ireland agrees to assume primary responsibility under the GDPR for the processing of Insights Data and to fulfil all obligations under the GDPR with regard to the processing of Insights Data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Meta Ireland will make the essence of this Page Insights Supplement available to data subjects.
8. Integration of external third-party content (YouTube and Google Maps)
We use content and services provided by third parties on our website in order to integrate their content and services, such as videos or map extracts (hereinafter referred to collectively as “content”).
This always presupposes that the third-party providers of this content perceive the IP address of users, since they would otherwise be unable to send the content to their browser. The IP address is therefore necessary to display the contents. We aim only to use content from providers who solely use the IP address for content delivery. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as web beacons) for statistical or marketing purposes. Pixel tags enable the evaluation of information such as visitor traffic on the pages of this website. The anonymised information may also be stored in cookies on the user’s device and may include other technical information on browser and operating system, linking websites, time of visit and other details concerning the use of our online offer, in addition to being connected to such information from other sources.
We integrate the content and services of third parties in order to optimise our website and operate services more clearly. The legal basis for this is regularly your consent pursuant to Art. 6 para. 1 a). GDPR.
You can revoke your consent at any time in the Cookie preferences in the footer of the website or via the fingerprint.
8.1. YouTube
We integrate the videos of the platform "YouTube" of the provider Google Ireland Limited. When you visit our website to watch YouTube videos, personal data (e.g. your IP address) is transmitted to YouTube and stored by YouTube. This data processing is carried out in accordance with YouTube's privacy policy. You can find Google's privacy policy here: https://www.google.com/policies/privacy/ To protect your privacy, we have embedded the YouTube videos on our website in extended data protection mode. This means that YouTube will not place any cookies for personalised advertising or tracking on your end device as long as you do not play the videos. Please note that a connection to the YouTube servers is established as soon as you start an embedded video. Further information on data processing and your rights can be found in YouTube's privacy policy https://www.google.com/policies/privacy/.
8.2. Google Maps
Iin order to provide you with an interactive map function, we integrate maps from the Google Maps platform provided by Google LLC. Data such as your IP address and location information will be transmitted to Google. You can find Google's privacy policy here: https://www.google.com/policies/privacy/.
9. Change of purpose
Your personal data will only be processed for purposes other than those described if this is permitted by law or if you have consented to the changed purpose of the data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you thereof prior to further processing and provide you with all other relevant information.
IV. Recipients or categories of recipients of the personal data
The principle of purposeful data use is strictly observed. All aforementioned types of data are only processed for the purposes stated here in this information.
Data is not transferred except in cases in which consent has been given or on legal grounds (for instance, requests from public authorities or due to court judgements).
In addition, software and IT service providers used, e.g. hosting providers, can access the data.
We also use the following service providers to fulfil the above-mentioned purposes: Usercentrics GmbH, Google Ireland Limited, Google LLC, Monotype Imaging Holdings Inc, LinkedIn Ireland Unlimited Company, Meta Platforms Ireland Limited, snapADDY GmbH, SAP Deutschland SE & Co KG, netzstrategen GmbH and logistics service providers such as GLS, Transoflex, Hellmann, Dachser, Emons, Geodis and Alverson.
B.PRO GmbH is part of the Blanc und Fischer family holding company, a group of companies. Your contact request may be shared within this group.
In addition, we use Blanc und Fischer IT Services GmbH with regard to the IT infrastructure and the provision of other resources to offer services with regard to our website. We also use the systems of the service provider Microsoft Ireland Operations Ltd. to enable communication and exchange. To support us with the sanctions list check, we use E.G.O. Elektro-Gerätebau GmbH, which is also part of the Blanc and Fischer family holding company.
Corresponding order processing contracts have been concluded with the service providers.
We only pass on your personal data within our company to those departments and persons who need it to realise and carry out their tasks. These are in particular the purchasing department and the corresponding specialised departments of the companies. In addition, we may also use other companies of the BLANC & FISCHER Group to provide the services/purposes described above, if this is necessary to fulfil the purposes. This may also include companies in third countries outside the EU.
V. Transmission to third countries
In principle, data processing takes place within the EU. Under certain circumstances, service providers and subcontractors may be used by our providers for service and maintenance purposes or the fulfilment of other purposes, which may be located in third countries without an adequate level of data protection. For this purpose, we have concluded corresponding order processing contracts, which are intended to ensure that suitable guarantees are in place to ensure an appropriate level of data protection when using subcontractors in third countries. Corresponding guarantees for data transfers can be found in the adequacy decision for the respective country, binding corporate rules or EU standard contractual clauses that have been concluded.
VI. Storage period and deletion of personal data
We are committed to the principles of proportionate, purposeful data processing and minimisation.
Unless otherwise stipulated, we only process your personal data for as long as we need your data, e.g. to establish a connection from your server enquiry to ours or to process your request. The personal data is then deleted or anonymised. This generally takes place when the contract has been fulfilled, you cancel your newsletter subscription or delete a registered account.
Statutory retention obligations remain unaffected by this. In this case, the data will be restricted and only stored for the statutory retention purpose.
However, if your email enquiry is a commercial and business letter as specified by the German Commercial Code, we are obliged to keep it for six years in accordance with Section 257 thereof.
Log files on this web server are deleted after 7 days.
VII. Rights of data subjects (right of access, rectification, erasure, restriction, data portability, objection and cancellation)
As a data subject, you have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure of your data (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), a right to data portability (Art. 20 GDPR) and a right to object (Art. 21 GDPR) at any time.
Please contact the data controller using the contact details given above.
You can object to the use of your data at any time and revoke any consent you may have given to the use of your data at any time. You can also have the data processed by us corrected, blocked or deleted at any time. If you revoke your consent to data processing or object to the use of the data, this does not affect the legality of the data processing up to the time of revocation.
We expressly inform you that there may be legal obligations (such as retention obligations under the German Commercial Code) to retain data until the expiry of specific deadlines, in which case the data can initially only be limited in accordance with Art. 18 of the GDPR. In other words, the data is only processed for the purpose of fulfilling the statutory retention requirements but no other purposes. Once the retention periods have expired, these are then deleted.
VIII. Right of appeal
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, telephone: +49 (0)711 6155410, email: poststelle@lfdi.bwl.de. Contact addresses of the other German and European supervisory authorities can be found at https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html or https://www.bfdi.bund.de/DE/Service/Anschriften/Europa/Europa-node.html.
IX. Amendment of this data protection notice
We always keep this data protection notice up to date. We therefore reserve the right to change them from time to time and to update changes in the collection, processing or use of your data. The current version of the data protection information is always available on the B.PRO website at the following link: https://www.bpro-solutions.com/en/data-privacy.
