Privacy Policy

1) Introduction and Contact Details of the Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data refers to all data with which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

BoldR Group GmbH
Am Eichberg Flauer 1
07338 Leutenberg / OT Munschwitz
Thuringia
Germany

Tel.: +49 36734 35 485,

Fax: +49 36734 35 315,

E-mail: iinfo@boldr-group.com.

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3

The controller has appointed a data protection officer who can be contacted as follows:

Dr. Bettina Kraft,

Konrad-Adenauer-Ring 33,

65187 Wiesbaden,

Tel.: +49 611 94588190,

E-mail: datenschutz@rameder.de

2) Data Collection When Visiting Our Website

2.1

When you use our website for informational purposes only, i.e., without registering or otherwise transmitting information to us, we collect only the data your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of unlawful use.

2.2

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

3) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies — small text files that are stored on your device. Some of these cookies are deleted automatically after you close your browser (so-called “session cookies”), while others remain on your device longer and allow site settings to be saved (so-called “persistent cookies”). The storage duration can be found in your web browser’s cookie settings overview.

If personal data is also processed by individual cookies implemented by us, the processing is carried out either in accordance with Art. 6 para. 1 lit. b GDPR for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR if consent has been given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interest in the best possible functionality of the website and a user-friendly and effective design of the site visit.

You can set your browser to inform you about the setting of cookies and to allow you to decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

4) Contacting Us

When you contact us (e.g., via contact form or email), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved and there are no legal retention obligations.

5) Use of Customer Data for Direct Marketing

5.1 Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for receiving the newsletter is your email address. Providing additional data is optional and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving it. You will then receive a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address as entered by your internet service provider (ISP) as well as the date and time of registration, in order to trace any possible misuse of your email address at a later time. The data collected during the newsletter registration will be used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this as permitted by law and as outlined in this privacy policy.

5.2 Inxmail

Our email newsletters are sent via the provider:

Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany

Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provided during newsletter registration to this provider in accordance with Art. 6 para. 1 lit. f GDPR so that they can handle the newsletter distribution on our behalf.

Subject to your express consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also performs a statistical analysis of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. In this process, device information (e.g. time of access, IP address, browser type and operating system) is also collected and analyzed but not combined with other data sets.

You can revoke your consent to newsletter tracking at any time with future effect.

We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

5.3 Advertising by Postal Mail

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, postal address and – if you have provided us with this additional information during the course of the contractual relationship – your title, academic degree, year of birth, and professional, industry, or business designation in accordance with Art. 6 para. 1 lit. f GDPR, and to use this information for sending interesting offers and information about our products by postal mail.

You may object to the storage and use of your data for this purpose at any time by contacting us.

6) Web Analytics Services

6.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, Google (Universal) Analytics sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This includes your IP address, which is shortened by Google to prevent direct identification.

The collected data is transmitted to and processed on Google servers. Transfers to Google LLC in the USA may also occur.

Google uses this data on our behalf to evaluate your website use, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected via Google (Universal) Analytics is stored for two months and then deleted.

All processing described above, especially setting cookies on your device, only occurs if you give us your explicit consent under Art. 6(1)(a) GDPR. Without your consent, Google (Universal) Analytics will not be used during your visit. You may revoke your consent at any time with future effect by disabling this service via the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with Google to ensure the protection of visitor data and prevent unauthorized disclosure to third parties.

For more information, visit:

Demographics

Google (Universal) Analytics uses the “Demographics” feature to generate reports about website visitors’ age, gender, and interests by analyzing advertising and third-party information. These data are not linked to individuals and are deleted after two months.

Google Signals

This website may also use Google Signals. If you have enabled personalized ads and linked your devices to your Google Account, and you’ve consented to Google Analytics, your behavior can be analyzed across devices. We receive only anonymized statistics. To disable this, turn off “Personalized Ads” in your Google Account settings. Learn more here: https://support.google.com

Details: https://support.google.com

UserIDs

The “UserIDs” feature can be used on this site. If you’ve set up an account and logged in across multiple devices, your interactions (including conversions) can be tracked across those devices.

For transfers to the U.S., the provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection based on a decision by the European Commission.

6.2 Google Analytics 4

This site also uses Google Analytics 4, a similar service from Google Ireland Limited.

It works similarly to Universal Analytics by setting cookies and shortening your IP address. Data is transmitted to Google and may be sent to Google LLC in the USA.

Google uses the data to provide reports and services related to site usage. The data is stored for two months, then deleted.

All processing (cookies, etc.) only occurs with your consent (Art. 6(1)(a) GDPR). You may withdraw consent via the cookie consent tool at any time.

We have a data processing agreement with Google.

For more info:

Demographics, Google Signals, and UserIDs features are also supported as described above.

Google LLC is certified under the EU-U.S. Data Privacy Framework.

7) Website Features

7.1 YouTube

This website uses plugins to display and play videos from:

Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA

When accessing a page containing such a plugin, your browser connects directly to the provider’s servers. Your IP address and other info are transmitted.

When a video is played, cookies may be used to collect data, generate playback statistics, and prevent misuse.

If you’re logged into your YouTube account, the interaction may be directly linked to your account. To prevent this, log out before playing videos.

All data processing (especially cookie use) only occurs with your consent under Art. 6(1)(a) GDPR. You can revoke this consent via the cookie consent tool on the site.

Google LLC is certified under the EU-U.S. Data Privacy Framework.

7.2 Google Maps

This website uses the online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive maps to visually represent geographic information. Using this service helps you locate our site and plan your route to us.

When you access pages that contain a Google Maps map, information about your website usage (e.g., your IP address) is transmitted to Google servers and stored there. This may include transfers to Google LLC servers in the USA. This occurs regardless of whether you are logged into a Google user account. If you are logged in, your data will be directly associated with your account. If you do not want this association, log out before activating the button. Google stores the data (even for users not logged in) as usage profiles and evaluates them.

Data collection, storage, and analysis are based on Google’s legitimate interest in displaying personalized advertising, market research, and/or needs-based website design pursuant to Art. 6(1)(f) GDPR. You have the right to object to the creation of these user profiles; to exercise this right, contact Google directly. If you do not agree to the future transmission of your data to Google as part of using Google Maps, you can disable the service completely by turning off JavaScript in your browser. In that case, Google Maps and map display on this website will no longer work.

Where legally required, we obtain your consent according to Art. 6(1)(a) GDPR before processing this data. You may revoke your consent at any time with future effect. To do so, follow the above-described opt-out procedure.

Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection laws.

More information about Google’s data protection:

https://business.safety.google/intl/en/privacy/

7.3 Google Web Fonts

This website uses so-called web fonts from the following provider for a consistent font display:

Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its cache to correctly display texts and fonts and establishes a direct connection with the provider’s servers. Certain browser data, including your IP address, is transmitted.

Data may also be transmitted to Google LLC, USA.

This processing of personal data only takes place with your explicit consent according to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by disabling the service via the cookie consent tool provided on the website. If your browser does not support web fonts, a standard font from your computer will be used instead.

Google LLC is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection.

More information on Google’s data protection:

https://business.safety.google/intl/en/privacy/

7.4 Job Applications via Email

Our website includes a dedicated section listing current job openings to which interested parties may apply by emailing the provided contact address.

Applicants must provide all necessary personal data for a proper evaluation, including general information (name, address, contact details), qualifications, and health-related information if applicable. Further details are outlined in the respective job posting.

Upon receiving an application via email, the data is stored and processed exclusively for handling the application. For follow-up, we may contact the applicant by email or phone. Processing is based on Art. 6(1)(b) GDPR (or § 26(1) BDSG under German law), as applying for a job is considered the initiation of an employment contract.

If special categories of personal data as defined in Art. 9(1) GDPR (e.g., health data such as disability status) are collected, processing is based on Art. 9(2)(b) GDPR to comply with employment and social security obligations. Alternatively, processing may also rely on Art. 9(2)(h) GDPR for health-related or occupational medical purposes.

If the applicant is not selected or withdraws their application, the submitted data and all related correspondence will be deleted within six months of notification. This retention period serves our legitimate interest in addressing follow-up questions and fulfilling legal obligations regarding applicant equal treatment.

If the application is successful, the submitted data will be processed for the purpose of employment under Art. 6(1)(b) GDPR (or § 26(1) BDSG under German law).

7.5 Online Applications via Form

Our website also offers an online form for submitting job applications to advertised positions.

Applicants must enter all required personal data (e.g., name, address, contact details, qualifications, and health-related data if necessary). Details are provided in the specific job posting.

When the form is submitted, the applicant’s data is encrypted and transmitted to us in accordance with current technical standards. We store and evaluate the data solely to handle the application. Processing is based on Art. 6(1)(b) GDPR (or § 26(1) BDSG under German law), as this constitutes the initiation of an employment contract.

If special categories of personal data under Art. 9(1) GDPR are processed (e.g., health data), it is done under Art. 9(2)(b) GDPR for compliance with legal employment and social protection obligations, or under Art. 9(2)(h) GDPR for healthcare-related reasons.

If the application is not pursued or the applicant withdraws, all data and related correspondence will be deleted within six months of notification. This period ensures we can answer any follow-up questions and meet legal obligations regarding equal treatment.

In the case of a successful application, the submitted data will be processed for employment purposes based on Art. 6(1)(b) GDPR (in Germany together with § 26(1) BDSG).

8) Tools and Other Services

8.1 Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. When users visit the website, the cookie consent tool is displayed as an interactive user interface, allowing them to grant consent for specific cookies and/or cookie-based applications by checking boxes. Only those cookies/services that the user has explicitly consented to via checkbox selection are activated. This ensures that such cookies are only set on the user’s device if consent has been given.

The tool uses technically necessary cookies to store your cookie preferences. No personal user data is generally processed in this context.

If, in individual cases, the processing of personal data (such as IP addresses) occurs for the purpose of storing, assigning, or logging cookie settings, it is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in lawful, user-specific, and user-friendly cookie consent management and thus in a legally compliant design of our website.

Another legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally obligated to make the use of non-essential cookies dependent on user consent.

Where required, we have concluded a data processing agreement with the provider to ensure the protection of the data of our website visitors and to prohibit unauthorized disclosure to third parties.

Further information about the cookie consent tool operator and the settings options can be found directly in the respective user interface on our website.

8.2 Cloudflare

For security purposes, this website uses the service of the following provider:

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA

The provider protects the website and its IT infrastructure from unauthorized third-party access, cyberattacks, viruses, and malware. The provider collects IP addresses of users and may also collect additional data about your behavior on our website (particularly accessed URLs and header information) in order to detect and prevent illegitimate access and threats. The collected IP address is compared with a list of known attackers. If it is identified as a security risk, the provider may automatically block access from that IP. The collected information is transmitted to a server of the provider and stored there.

The described data processing is carried out according to Art. 6(1)(f) GDPR based on our legitimate interest in protecting the website against harmful cyber threats and maintaining structural and data integrity and security.

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prevent unauthorized data disclosure.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the European data protection level based on a decision of adequacy by the European Commission.

9) Rights of the Data Subject

9.1

Applicable data protection law grants you the following rights with respect to the processing of your personal data by the controller. For the respective conditions of exercise, please refer to the cited legal basis:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL IMMEDIATELY STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration for which personal data is stored is determined based on the respective legal basis, the purpose of processing, and—if applicable—any relevant statutory retention period (e.g., commercial and tax retention periods).

If the processing of personal data is based on explicit consent under Art. 6(1)(a) GDPR, the data will be stored until you revoke your consent.

If statutory retention periods apply to data that is processed on the basis of Art. 6(1)(b) GDPR for contractual or pre-contractual obligations, the data will be routinely deleted after the retention periods expire, unless it is still required for contract performance or initiation, or if there is a legitimate interest in further storage.

If personal data is processed on the basis of Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If personal data is processed for direct marketing purposes under Art. 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise specified in this privacy notice, personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: March 27, 2025 at 09:22:41 AM