Privacy Policy
1. General information
The protection of your personal data is important to me. This privacy policy informs you about which data is processed when you visit this website and for what purpose.
Personal data is processed exclusively within the scope of the statutory data protection provisions, in particular the General Data Protection Regulation (GDPR).
2. Controller
Benjamin Tietz
Wiehagenerstraße 58
42499 Hückeswagen
Germany
Email: info@btech-solutions.eu
Phone: +49 163 266 1004
3. Scope of data processing
When you visit this website, personal data is only processed to the extent that this is technically necessary or you have expressly consented to the processing.
Processing for advertising purposes takes place exclusively after prior consent via the consent system used. For analysis purposes, audience measurement takes place without cookies and without any access to your device; you may object to it at any time. Details are set out in section 10.
4. Server log files
The hosting provider automatically collects and stores information in so-called server log files. This information includes, among other things:
- IP address of the requesting device
- date and time of the request
- pages accessed and volume of data transferred
- browser type and operating system
- the previously visited page (referrer)
These logs are created by the hosting provider and are managed and periodically deleted according to its own specifications. This data is not combined with other data sources and is not evaluated for reach measurement.
Processing is based on Art. 6 (1) (f) GDPR (legitimate interest) to ensure the technical operation, stability and security of the website.
Hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
The hosting provider processes personal data (e.g. IP addresses in server log files) to ensure the technical operation, stability and security of the website.
Processing is based on Art. 6 (1) (f) GDPR. A data processing agreement pursuant to Art. 28 GDPR exists with the hosting provider.
The servers are located in Germany.
5. Contact by email and contact form
If you contact me by email, the information you provide is stored exclusively for processing your enquiry. It is not passed on to third parties. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures), otherwise Art. 6 (1) (f) GDPR.
Contact form
When you submit the contact form, the fields you have completed are processed – depending on the form, in particular your name, email address, optionally your telephone number and your message. Transmission to a server operated as part of this website is encrypted.
Your enquiry is delivered to me by email and additionally recorded in a file on the server. This second step is deliberate: if the email delivery fails, your enquiry would otherwise be lost without either of us noticing.
Retention period: These log files are deleted automatically after 180 days. Independently of this, I delete your enquiry as soon as it has been dealt with conclusively and no statutory retention obligations apply.
The legal basis is Art. 6 (1) (b) GDPR for handling your enquiry and Art. 6 (1) (f) GDPR for the fail-safe logging. My legitimate interest is that no enquiry is lost unnoticed.
Protection against automated submissions
To protect the form against large-scale misuse, the number of submissions per sender is limited. For this purpose your IP address is not stored in plain text but converted into a non-reversible check value used solely for this purpose. In addition, the time elapsed between opening and submitting the form is evaluated, because automated scripts submit instantly.
If an enquiry is stored, the IP address is additionally truncated: for IPv4 the last block is removed, for IPv6 everything below the network prefix. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing misuse).
6. Requesting a free website analysis
On this website you have the option of requesting a free technical website analysis.
The following personal data is processed in this context:
- email address
- website URL
Processing takes place exclusively for the purpose of carrying out the requested analysis and transmitting the analysis results by email.
The legal basis is Art. 6 (1) (b) GDPR (performance of pre-contractual measures).
The data is not used for marketing purposes and not passed on to third parties.
The data is deleted after completion of the analysis, provided that no further cooperation comes about and no statutory retention obligations exist.
7. Appointment booking on this website
Appointments for a first call are arranged through a self-hosted booking system running on this website's own server. An external scheduling provider is no longer embedded. Opening the booking page loads no third-party code and transmits no data to third parties.
When you book an appointment, the following personal data is processed:
- name
- email address
- phone number (required for a phone appointment, otherwise optional)
- chosen time and preferred call format
- topic from a fixed list
- voluntary details in the message field
- shortened IP address, to prevent automated bookings
Processing serves solely to arrange and hold the agreed call. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures); for the shortened IP address it is Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse).
After booking you receive an email confirmation with a calendar entry in ICS format and a personal link that lets you cancel at any time, without giving a reason. One day before the appointment we send a single reminder to the same address.
The booking record is deleted automatically no later than 90 days after the appointment; on cancellation it is removed immediately. All that remains is a log entry without name or contact details (time, topic, language, referring page), used solely to review capacity.
Confirmation, reminder and cancellation emails are sent through the hosting provider's mail server (see the "Hosting" section). No data is passed to third parties or used for advertising.
8. External content
External content is never loaded automatically on this website. Wherever it occurs, it sits behind a button you have to press first. Without that action no connection to a third-party provider is established and no data is transmitted.
Direct links to WhatsApp and Telegram
The contact page contains direct links to WhatsApp and Telegram. Merely visiting the website does not load content from these providers or transmit data to them. Only when you click a link do you leave this website; from that point the privacy policy of the provider you opened applies. If you prefer not to use these services, please contact me by email, phone or through the contact form.
Interactive map on the contact page
An interactive map is available on the contact page. It initially shows only a placeholder with an “Activate map” button.
If you press the button, the map tiles are loaded from CARTO (CARTO Inc., North America) based on data from the OpenStreetMap project. Your IP address is transmitted to that service in the process; it is technically required so that the map tiles can be delivered to your device. A transfer to a third country cannot be ruled out.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG, which you give by pressing the button. It applies only to the current page view: if you load the page again, the map is inactive once more.
The address is also given as text on the page. You do not have to activate the map in order to find me.
CARTO privacy information: https://carto.com/privacy
Maps without third parties
Elsewhere on this website, maps are used that are served entirely from my own server. Those maps call no third party, transmit no data and therefore require no consent.
9. Storage on your device (cookies, local and session storage)
Access to your terminal equipment is governed by Section 25 TDDDG. Everything stored or read here without consent is strictly necessary under Section 25 (2) no. 2 TDDDG in order to provide the function you have expressly requested. Everything else is only set after your consent pursuant to Section 25 (1) TDDDG.
Complete overview of the storage objects used:
- btc-consent-v2 (local storage, 365 days) – stores your privacy decision per category. Without it you would have to decide again on every page view. Strictly necessary.
- btc_consent (cookie, same lifetime) – contains only the fact that a decision exists at all. It carries no categories and no identifier. It prevents the consent dialogue from flashing briefly while the page loads. Strictly necessary.
- btech-concierge-session (session storage, ends when the browser tab is closed) – remembers the state of the on-site companion within a single visit. Strictly necessary.
- btech-concierge-metrics (session storage, ends with the tab) – counts displays and clicks of the on-site companion within a single visit. Strictly necessary.
- btech-assistant-lang (session storage, ends with the tab) – remembers the selected language of the on-site companion. Strictly necessary.
The session storage objects never leave your device and contain no persistent identifier. They are deleted when you close the tab.
The legal basis for the subsequent processing of this information is Art. 6 (1) (f) GDPR (legitimate interest in the secure and functional operation of the website); for the consent record additionally Art. 6 (1) (c) GDPR, because I must be able to demonstrate your decision.
Storage objects requiring consent – for instance those of external services – are only set once you enable the corresponding category. As long as you do not, no such object is created.
Withdrawal: You can change your decision at any time. At the bottom of every page you will find the “Cookie settings” entry in the footer. Withdrawing is therefore exactly as easy as giving consent, and it takes effect immediately.
Fonts are served from my own server. No third-party font, icon or script service is embedded.
10. Web analytics
Matomo is used on a self-hosted server within this web offering for cookie-free audience measurement. It sets no analytics cookies, does not read active browser features such as screen resolution or extensions, and does not combine visits across websites. The IP address is truncated server-side by two octets.
The data processed comprises page views, time and duration, referrer and campaign parameters, passively transmitted browser, operating-system and device details, the region derived from them, and coarse events such as button clicks. Free text, names, email addresses and form content are not sent to Matomo.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is to identify which content is used and where the website has technical problems. Raw data is deleted after 180 days; only aggregate evaluations without personal reference are retained for longer.
Your right to object: You may object to audience measurement at any time in the privacy settings. Switching the analytics category off stops page views and heartbeats immediately and prevents measurement on later visits.
Google Analytics 4 – only with your consent. In addition, the web analysis service Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is integrated — exclusively in connection with the digital assistant and only on the pages where it is offered. It is loaded only if you explicitly allow the “Analytics” category in the privacy settings. As long as you do not, no Google script is loaded and no data is transmitted to Google.
If you do give consent, Google processes information such as page views, dwell time, interactions and technical details about the device used. The IP address is truncated within the EU. It cannot be ruled out that data is transferred to servers of Google LLC in the USA; this takes place on the basis of the European Commission's standard contractual clauses. The legal basis is Art. 6 (1) (a) GDPR; consent can be withdrawn at any time via the privacy settings.
Further information on data processing by Google: https://policies.google.com/privacy
11. SSL / TLS encryption
This website uses SSL or TLS encryption to protect the transmission of confidential content.
12. Your rights
You have the following rights regarding the personal data concerning you:
- access to the data processed (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
An informal message to the postal or email address given above is sufficient to exercise them.
Right to withdraw consent
If you have given consent, you may withdraw it at any time with effect for the future (Art. 7 (3) GDPR). The lawfulness of processing carried out until withdrawal remains unaffected. For consent relating to storage objects, use the “Cookie settings” entry in the footer.
Right to object
Where I process data on the basis of legitimate interests under Art. 6 (1) (f) GDPR, you may object to that processing at any time. No reason need be given if the objection is directed against direct marketing; otherwise a reason arising from your particular situation is sufficient.
Complaint to the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me as the controller is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
You may also contact the supervisory authority of your habitual residence or place of work.
13. Data protection officer, profiling and automated decisions
I am not required to appoint a data protection officer and have not appointed one. The conditions of Art. 37 GDPR and Section 38 BDSG are not met. For any data protection matter you can reach me directly using the contact details given in section 2.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. No personality or interest profiles are created and there is no recognition across devices or websites.
Providing your data is neither legally nor contractually required. You are under no obligation to provide it. However, without the fields marked as mandatory in the respective form I cannot answer your enquiry.
14. Retention periods at a glance
Personal data is only stored for as long as is necessary for the respective purpose or as long as statutory retention periods exist. In detail:
- log files of form submissions: automatic deletion after 180 days
- check values for misuse prevention: relevant only for the respective ten-minute window
- contact enquiries: deleted once dealt with conclusively. Appointment bookings: deleted automatically no later than 90 days after the appointment
- consent record on your device: 365 days, after which you are asked again
- server log files: according to the hosting provider's specifications
If an enquiry leads to an engagement, the resulting documents are subject to commercial and tax retention periods of six and ten years respectively (Section 257 HGB, Section 147 AO). That data is restricted in processing for the duration of the period and deleted afterwards.
15. Changes to this privacy policy
This privacy policy is adapted whenever the processing, the technology used or the legal situation changes. The version published on this page is the applicable one; its status and revision history are noted on the document.
If anything changes about processing that requires consent, I will ask for your decision again. Consent already given is not silently carried over in that case.