Privacy Notice

We process personal data only where a statutory basis exists or where you have given your express consent. Personal data means any information relating to an identified or identifiable natural person (Art. 4(1) GDPR).

The principal legal bases are Art. 6(1)(a) GDPR (consent), (b) (performance of a contract), (c) (legal obligation) and (f) (legitimate interest). We process data for specified purposes and erase it as soon as the purpose ceases to apply and no statutory retention obligations remain.

Each time our website is accessed, our hosting provider records technically necessary data in server log files:

• IP address of the requesting device
• date and time of the request
• requested URL and HTTP status code
• amount of data transferred
• browser type and operating system
• referrer URL (where transmitted)

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in delivering the website, ensuring its functionality and defending against attacks.

Log files are deleted no later than 30 days after collection unless there are indications of misuse. The data is not combined with other sources.

This website does not use tracking cookies and does not embed third-party cookies. We use only strictly necessary storage objects:

• bkm-cookie-consent — stores your cookie-banner choice ("Accept all" or "Necessary only") in your browser's localStorage so that the banner does not reappear on subsequent visits. The value is stored locally in your browser only; no transmission to our server occurs.

You can configure your browser to reject or delete cookies and local storage. No functional restrictions on the website are to be expected as a result.

The font "IBM Plex Sans" is delivered directly from our own web server. No connection is made to Google Fonts or any other external font service. No data is transmitted to third parties in this respect.

If you contact us by email, phone or fax, we process the data you provide (in particular name, contact details and the content of your enquiry) in order to respond to your request.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns the conclusion or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). The data is erased once it is no longer needed for the purpose of processing and no statutory retention obligations apply.

RMA online form On our website we provide an online form for creating an RMA request. Both the processing of your input and the generation of the filled PDF take place entirely within your browser on your device. The data you enter is not transmitted to our server while you use the form. Only once you send us the generated PDF by email, postal mail or another channel do we process the personal data it contains in order to handle your matter; in that case the provisions above apply, together with § 9 (Data processing in the business relationship) where applicable.

Where we offer an email newsletter on our website, sign-up takes place using a double opt-in procedure: after you enter your email address, we send you a confirmation email containing an activation link. Your address is only added to the distribution list once you click that link. If no confirmation is received within 24 hours, your sign-up is deleted automatically.

For the purpose of sending the newsletter, we process your email address as well as the date and time of sign-up and unsubscribe. The legal basis is Art. 6(1)(a) GDPR (consent). The confirmation email also serves as proof of consent and is stored for that purpose.

You can withdraw your consent to receive the newsletter at any time — either via the unsubscribe link in every newsletter message or by sending a notice to the contact details listed in § 1. Once withdrawn, the data stored for the newsletter is deleted, except where it is still required as proof of consent.

In connection with enquiries, quotations, orders and delivery handling, we process the data required for the performance of the contract — in particular master data, delivery and invoicing data and correspondence.

The legal basis is Art. 6(1)(b) and (c) GDPR. Retention periods follow from German commercial and tax law (typically 6 to 10 years; §§ 257 HGB, 147 AO).

If you send us application documents, we process the data they contain solely for the purpose of conducting the application procedure. The legal basis is § 26 BDSG in conjunction with Art. 6(1)(b) GDPR.

If we do not offer employment, we delete the application documents no later than four months after the procedure has been concluded, unless legitimate interests require longer retention or you expressly consent to longer storage — for example to be considered for our applicant pool.

Your personal data is disclosed to third parties only where you have consented (Art. 6(1)(a) GDPR), where disclosure is necessary for the performance of a contract (b), where there is a statutory obligation (c), or where an overriding legitimate interest exists (f).

Where we engage processors (e.g. hosting providers), we do so under a data processing agreement pursuant to Art. 28 GDPR. No transfer to third countries outside the EU/EEA takes place.

Your data is transmitted in encrypted form via TLS (HTTPS). In addition, we apply appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access.

You have the following rights:

• access to the data we process about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
• withdrawal of any consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to the contact details listed in § 1 or § 2 is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). The competent authority for our company is:

We will adjust this privacy notice as soon as changes to the way we process data require it. Last updated: May 2026.