Privacy Policy

The protection of your personal data is important to BroTech Innovation GmbH. This Privacy Policy explains how personal data is collected, processed and protected when you visit and use this website. Personal data is processed only where permitted by applicable data protection law, in particular the General Data Protection Regulation (GDPR) and applicable German data protection legislation.
The following information explains what data may be processed, for what purposes and on which legal basis, how long it may be stored, whether it may be shared with third parties, and what rights you have regarding your personal data.

Controller Responsible for Data Processing:

BroTech Innovation GmbH
Kötztinger Straße 90
90480 Nürnberg
Germany

Managing Director: Kevin Brockschmidt
Email: kevin.brockschmidt@brotech-innovation.com
Phone: +49 1511 6836503

General Information on Data Processing:

BroTech Innovation GmbH processes personal data only to the extent necessary for the operation of this website, communication with website visitors, and the provision of our services.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection legislation. Depending on the specific processing activity, data may be processed on the basis of consent, for the performance of a contract or pre-contractual measures, for compliance with a legal obligation, or on the basis of legitimate interests.
We follow the principles of data minimization and purpose limitation. Personal data is processed only for specified purposes and retained only for as long as necessary for those purposes or as required by applicable legal retention obligations.
Further information about the individual processing activities, their purposes and legal bases is provided in the sections below.

Hosting and Server Log files :

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.
When you access our website, the hosting provider automatically processes technical information required to deliver the website, maintain its functionality and ensure system security. This may include your IP address, the date and time of access, requested pages and files, browser and operating system information, referring URLs and server response information.
The processing of this data is based on Article 6(1)(f) GDPR. Our legitimate interest is to ensure the secure, stable and reliable operation of our website.
STRATO also provides website statistics based on server access information, including visitor numbers, sessions, page views and traffic sources. These statistics are used to provide an overview of website traffic.
According to STRATO’s published information, IP addresses may be retained for security purposes for up to seven days. Access logs made available to hosting customers contain anonymized IP addresses and may be accessible for up to six weeks. Statistical information may be retained for longer periods.
Personal data is retained only for as long as necessary for the respective purposes or as required by applicable law.

SSL/TLS Encryption:

This website uses SSL/TLS encryption to protect the transmission of confidential information and personal data. An encrypted connection can generally be recognized by the “https://” prefix in the browser’s address bar.
SSL/TLS encryption helps protect data transmitted between your browser and our website against unauthorized access during transmission.

Contact by Email, Phone and Contact Form:

Visitors may contact BroTech Innovation GmbH by email, telephone or through the contact form provided on this website.
When you use the contact form, the information you provide, including your name, email address and message, is processed for the purpose of handling and responding to your inquiry. Contact form submissions are sent to info@brotech-innovation.com and are also stored in the website’s WordPress database.
If you contact us by email or telephone, the personal data provided in connection with your inquiry will also be processed for the purpose of handling and responding to your request.
Where your inquiry relates to the conclusion or performance of a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. For other inquiries, processing is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in responding to communications addressed to us.
Personal data provided in connection with an inquiry will be retained only for as long as necessary to process and conclude the respective communication, unless statutory retention obligations or another legal basis require longer storage.

Cookies and Similar Technologies:

Our website does not use cookies for advertising, marketing or visitor analytics.
Technically necessary cookies and similar technologies may be used to ensure the security and proper functioning of the website. These technologies are used only where necessary and do not serve advertising or tracking purposes.
Our contact form uses ALTCHA to protect against automated spam submissions. ALTCHA operates without tracking cookies.
Where technically necessary cookies or similar technologies are used, the legal basis is Section 25(2) TDDDG. Any associated processing of personal data is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in providing a secure and functional website.

Consent Management / Cookie Banner:

Our website does not use cookies or similar technologies for advertising, marketing or visitor analytics.
As the website is designed to use only technically necessary technologies, no consent management platform or cookie consent banner is currently required.
If technologies requiring prior consent are introduced in the future, we will implement an appropriate consent mechanism before activating them.

Third-Party Services and Embedded Content:

Our website may contain links to external websites operated by third parties. When you follow such a link, you leave our website and the privacy policies of the respective third-party providers apply.
External content, such as videos, maps or social media content, may be integrated into our website. Where such content is used, we aim to prevent connections to third-party servers until the visitor actively chooses to access or activate the content.
When external content is activated, the respective provider may process personal data, including your IP address, browser information and technical connection data.
Where prior consent is legally required for the integration of external content, processing takes place only after consent has been obtained in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG, where applicable.
Further information about the processing of personal data by external providers can be found in their respective privacy policies.

Data Retention:

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and processed.
Where statutory retention obligations apply, the relevant data may be stored for the period required by law. After the applicable purpose has been fulfilled and any statutory retention periods have expired, the data will be deleted or anonymized, unless further processing is permitted or required by law.
Specific retention periods or the criteria used to determine them may be described separately in this Privacy Policy for individual processing activities.

Recipients of Personal Data:

Personal data collected through our website is accessible only to authorized employees of BroTech Innovation GmbH who require access to perform their professional duties.
We use STRATO GmbH as our hosting provider. STRATO processes personal data on our behalf to the extent necessary for hosting, maintaining and securing our website, including the storage of contact form submissions.
Where external service providers process personal data on our behalf, we ensure that appropriate data processing agreements are in place in accordance with Art. 28 GDPR, where legally required.
We do not sell personal data to third parties.
Personal data may also be disclosed to competent public authorities where required by applicable law.

Data Transfers Outside the EU/EEA:

We do not transfer personal data to countries outside the EU/EEA. Our hosting provider STRATO GmbH processes data in data centers in Germany.

Your Rights under GDPR:

Under the GDPR, you have various rights regarding the processing of your personal data. Subject to the applicable legal requirements, these include:
• Right of access (Art. 15 GDPR): You have the right to request information about the personal data we process about you.
• Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data and the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data where the applicable legal requirements are met.
• Right to restriction of processing (Art. 18 GDPR): You may request that the processing of your personal data be restricted under certain circumstances.
• Right to data portability (Art. 20 GDPR): Where the legal requirements are met, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller.
• Right to object (Art. 21 GDPR): You have the right to object to certain processing of your personal data, in particular where processing is based on legitimate interests.
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, you may contact us at: info@brotech-innovation.com

Right to Lodge a Complaint:

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority in accordance with Art. 77 GDPR.
The supervisory authority responsible for private-sector organizations in Bavaria is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
You may also lodge a complaint with another competent supervisory authority, in particular in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.

Changes to privacy policy:

We may update this Privacy Policy from time to time to reflect changes to our website, the services and technologies we use, or applicable legal requirements.
The current version of this Privacy Policy is always available on this website. We recommend reviewing it periodically to stay informed about how personal data is processed.