Privacy Policy

1. Data Controller

BM Holding GmbH
Forstweg 4f
86420 Diedorf

Email: beratung@bm-holding.net
Phone: +49 (0) 8238 9682800

Authorised managing directors: Serhat Becherer, Jocelyn Moreau

2. General Information on Data Processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), as well as this privacy policy.

3. Data Processing When Visiting the Website

When you visit our website, technical access data is automatically collected, including your IP address, date and time of access, pages visited, browser and operating system used, and the referring URL. This data is processed for the technical operation of the website and to ensure system security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable web presence).

4. Use of Cookies

Our website uses cookies. These are small text files stored on your device. We use both essential cookies that are technically necessary for the operation of the website, and analytics cookies that help us understand and improve the use of our website.

Legal basis: Art. 6(1)(a) GDPR (consent) for non-essential cookies; Art. 6(1)(f) GDPR (legitimate interest) for technically necessary cookies.

5. Web Analytics / Tracking

We use web analytics tools on our website (e.g. Google Analytics or comparable services) to statistically evaluate the use of our website. These services use cookies and generally transmit the information generated to a server where it is stored. IP anonymisation is enabled, so your IP address is only processed in truncated form.

Legal basis: Art. 6(1)(a) GDPR (consent).

6. Use of Cloudflare

We use the Content Delivery Network (CDN) and security services of Cloudflare, Inc. Cloudflare provides DDoS protection and optimises the loading times of our website. In doing so, data about your access to our website is routed through Cloudflare's servers. Cloudflare may set cookies to ensure security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and high-performance web presence).

7. Embedding of YouTube Videos

We embed YouTube videos on our website. The operator is Google Ireland Limited. We use YouTube in enhanced privacy mode. Videos are only loaded when you actively click the play button. Only then is data transmitted to YouTube.

Legal basis: Art. 6(1)(a) GDPR (consent).

8. Embedding of OpenStreetMap

We use the mapping service OpenStreetMap (operated by the OpenStreetMap Foundation, OSMF) to display location information. When the map is accessed, map tiles are loaded from OSMF servers, during which your IP address is transmitted. Further information can be found in the privacy policy of the OpenStreetMap Foundation at osmfoundation.org.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in displaying our location).

9. Contact

When you contact us via the contact form or email, your information (name, email address, message) is processed and stored for the purpose of handling your enquiry. We do not share this data without your consent.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or contract performance).

10. Retention Period

Personal data is only retained for as long as is necessary to fulfil the respective purpose or as required by statutory retention obligations. Once the retention period has expired, the data is routinely deleted.

11. Your Rights

Under the GDPR, you have the following rights:

Access — Right to obtain information about your stored data (Art. 15 GDPR)
Rectification — Right to rectification of inaccurate data (Art. 16 GDPR)
Erasure — Right to erasure of your data (Art. 17 GDPR)
Restriction — Right to restriction of processing (Art. 18 GDPR)
Data portability — Right to data portability (Art. 20 GDPR)
Objection — Right to object to processing (Art. 21 GDPR)
Withdrawal — Right to withdraw consent with effect for the future

To exercise your rights, please contact: beratung@bm-holding.net

12. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach

13. Currency of This Privacy Policy

As of: January 2026. We reserve the right to amend this privacy policy in order to reflect changes in the legal framework or modifications to our data processing practices.