Privacy Policy
1. Controller
Bognar GmbH
Hinter Stocken 5–9, 72336 Balingen, Germany
Phone: +49 7433 36267 · Email: firma@bognar-gmbh.de
2. General information on data processing
This website is a static information site. We do not use cookies and we do not embed third-party web fonts or map services. We use Cloudflare Turnstile to protect the contact form against spam (see section 5) and the self-hosted tool Umami for cookieless visitor statistics (see section 7).
3. Hosting and server log files
This website is provided via the Cloudflare Workers service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission covers data transfers to the USA (Art. 45 GDPR).
When you visit this website, Cloudflare automatically collects information in so-called server log files (e.g. IP address, date and time of access, page accessed, browser used). This data is used to ensure trouble-free operation and to improve security (legal basis: Art. 6(1)(f) GDPR). It is not merged with other data sources.
4. Contact form and email contact
If you contact us via the contact form or by email, we process the data you provide (name, email address, phone number if given, and your message) solely for the purpose of handling your inquiry (legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR). Form data is transmitted in encrypted form via our hosting provider Cloudflare (see section 3) to our email inbox. Beyond that, the data is not passed on to third parties and is deleted as soon as it is no longer required for processing, unless statutory retention obligations apply.
5. Spam protection with Cloudflare Turnstile
To protect the contact form against spam and automated access (bots), we use the Cloudflare Turnstile service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When the homepage is loaded, a script from Cloudflare checks technical characteristics of your browser and device (e.g. IP address, browser and system information, and information about your interaction with the page) to determine whether the request comes from a human. Turnstile does not use cookies for advertising or tracking; the data is used exclusively to detect bots and prevent abuse.
The legal basis is our legitimate interest in protecting our website and inbox against abusive automated requests (Art. 6(1)(f) GDPR). Accessing information on your device is strictly necessary for this service requested by you (Section 25(2) no. 2 TDDDG). For more information, see the Turnstile privacy policy and Cloudflare’s privacy policy.
6. Language detection
On your first visit, your browser's language setting determines whether the German or English version of the website is displayed. Your language preference is stored exclusively locally in your browser (local storage) and is not transmitted to us.
7. Visitor statistics with Umami
To understand how our website is used and to improve it, we use the open-source tool Umami. Umami does not run at an analytics provider but on a dedicated server of the hosting provider DigitalOcean, LLC in a data centre in Frankfurt am Main, Germany. When you open a page, your browser loads a script from this server.
The following is recorded: the page visited, the page you came from (referrer), browser, operating system, device type, screen size, language and your approximate country or region. We also count clicks on certain elements (e.g. phone number, email address, contact buttons, language switcher) and whether a message was sent successfully via the contact form. The content of the form is not recorded.
Umami does not set cookies and does not store any data on your device. Your IP address is not stored; it is only used briefly to determine your country and, together with browser information, to form a regularly changing identifier that cannot be traced back to you and is used to group repeated page views. We only evaluate the data in aggregated form and do not pass it on to third parties.
The legal basis is our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). If your browser sends the “Do Not Track” signal, no data is recorded. You can also object to the recording at any time, for example by enabling “Do Not Track” or using a content blocker.
8. Your rights
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Germany.