Bodo Tech

Privacy Policy

1. Controller

Bodo Tech UG (haftungsbeschränkt)
Managing Director: Utku Pul
Kullrichstr. 10
44141 Dortmund
Germany

Email: kontakt@bodotech.de
Phone: +49 151 44903794

2. Contact for Data Protection Matters

For data protection inquiries, please contact us at:
Email: datenschutz@bodotech.de

3. Data Collected

We collect and process the following personal data:

  • Contact form data: Name, email address, phone number, practice name, message content
  • Server log files: IP address (used for technical security, short-term retention as defined by our hosting provider Vercel's log retention policy), browser type, operating system, referrer URL, date and time of access
  • Analytics data: Page views, session duration, origin (via Vercel Web Analytics, cookie-free, with no individual visitor tracking)

Required fields in the contact form are name, email, and message; further fields (phone, practice name) are voluntary. Without the required fields we cannot process your inquiry.

4. Purpose of Processing

  • Responding to your contact inquiries and providing requested information
  • Pre-contractual measures taken at your request
  • Technical operation and IT security of the website
  • Aggregated, anonymous usage statistics

5. Legal Basis

The processing of your personal data is based on the following legal grounds:

  • Art. 6 (1)(b) GDPR (Contract / pre-contractual measures): Processing your contact form inquiry and any subsequent business communication.
  • Art. 6 (1)(f) GDPR (Legitimate interest): Technical provision of the website, IT security (server logs), and aggregated usage statistics. Our legitimate interest lies in stable, secure website operation and demand-driven improvement of our services.

6. Retention Period

We retain your personal data only as long as necessary for the respective purpose or as required by statutory retention obligations:

  • Server log files: short-term retention as defined by our hosting provider Vercel's log retention policy; used solely for IT security and technical error analysis.
  • Contact inquiries: until your inquiry has been fully processed, then up to 6 months for traceability; afterwards deleted, unless statutory retention obligations apply (e.g. § 147 German Fiscal Code for contract-relevant content: 6–10 years).
  • Vercel Web Analytics: aggregated, non-personal metrics in line with Vercel's retention.

7. Your Rights

Under GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR): You may request information about your personal data stored by us.
  • Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR): You may request deletion of your data, provided no statutory retention obligations apply.
  • Right to restriction of processing (Art. 18 GDPR): You may request that we restrict the processing of your personal data under certain conditions.
  • Right to data portability (Art. 20 GDPR): You may request that your data be transmitted in a structured, machine-readable format to you or a third party.
  • Right to object (Art. 21 GDPR): You may object to the processing of your data based on Art. 6 (1)(f) GDPR.
  • Right to withdraw consent (Art. 7(3) GDPR): Where you have given us consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.
  • Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (ldi.nrw.de).

8. Cookies

This website uses only one technically necessary cookie (NEXT_LOCALE) to store your language preference. No tracking cookies or third-party cookies are used. Consent is therefore not required (Section 25(2) TDDDG). We use Vercel Web Analytics as a privacy-friendly analytics solution; it operates without cookies, performs no individual visitor tracking, and processes only aggregated, pseudonymized metrics.

9. Third Parties

  • Vercel Inc. (Hosting & Web Analytics)
    Our website is hosted by Vercel. Servers are located in the EU (Frankfurt). Vercel processes server log data for technical provision and provides aggregated, cookie-free usage metrics via Vercel Web Analytics.
    We have concluded a Data Processing Agreement (DPA) with Vercel Inc. pursuant to Art. 28 GDPR. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (DPF); any data transfers to the United States rely on this adequacy decision (Art. 45 GDPR).
    Privacy: vercel.com/legal/privacy-policy
  • Mailbox.org / Eversmann SE, Berlin (Germany) — SMTP delivery of contact form inquiries. Servers in Germany. We have concluded a Data Processing Agreement (DPA) with Eversmann SE pursuant to Art. 28 GDPR.
    Privacy: mailbox.org/en/data-privacy

10. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content (such as inquiries you send via the contact form), this site uses SSL/TLS encryption. You can recognize an encrypted connection by the https://prefix and the lock symbol in your browser's address bar.

11. No Automated Decision-Making

No decisions based solely on automated processing, including profiling within the meaning of Art. 22 GDPR, take place.

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed to reflect changes in legal requirements or changes in our data processing practices. The current version is always available on this page.

Information about the controller can also be found in our Imprint.

Last updated: 4 May 2026