Protecting your personal data is important to us. Here you can find out what data we collect, how we use it, and what rights you have. Your privacy matters to us just as much as our commitment to technological innovation. If you have any questions, please don’t hesitate to contact us.
Privacy Policy
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.
The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.
We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.
Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.
A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order enquiries.
You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.
Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.
There is a possibility that your browsing patterns will be statistically analyzed when your visit this website. Such analyses are performed primarily with what we refer to as analysis programs.
For detailed information about these analysis programs please consult our Data Protection Declaration below.
We are hosting the content of our website at the following provider:
The provider is the Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter referred to as Hetzner).
For details, please view the data privacy policy of Hetzner: https://www.hetzner.com/de/legal/privacy-policy/.
We use Hetzner on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable depiction of our website possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.
The data processing controller on this website is:
Innomancer GmbH
Olympiastraße 6a
86179 Augsburg
Phone: +49 821 8151-4221
E-mail: info@boesl.org
The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.
In the scope of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is required as part of the fulfillment of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits the disclosure of this data. Processing on our behalf is subject to the requirements of Art. 28 GDPR. Where there is joint controllership, the allocation of responsibilities is governed by Art. 26 GDPR.
A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:
If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in our Site Notice to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.
Our website uses cookies, which are small data packages stored on your device. Session cookies are deleted at the end of the session. Persistent cookies remain on your device until they expire, unless you delete them earlier. Cookies may originate from us or from integrated third-party providers.
Storing information on your device or accessing information on it without consent is permitted only where this serves solely to transmit a communication over a public telecommunications network or is strictly necessary to provide a digital service you have expressly requested (§ 25(2) TDDDG). Where personal data is processed in this context, the processing is based on our legitimate interest in providing that service securely and reliably (Art. 6(1)(f) GDPR), unless another legal basis is specified.
We do not treat cookies or comparable technologies for audience measurement or advertising as technically necessary. Their use requires your consent under § 25(1) TDDDG and, where personal data is processed, Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.
You can configure your browser to notify you about cookies, allow them only in individual cases, or delete them automatically. Blocking necessary cookies may restrict certain functions. Further details about the services used appear in the following sections.
The WordPress plugin Pixelmate is installed on this website to manage consent for cookies and integrated services. It stores your selection in a cookie so that your decision can be associated with subsequent page visits. Consent is voluntary and may be withdrawn with effect for the future.
Storing the privacy preferences you select is necessary for this function under § 25(2) no. 2 TDDDG. Where consent and its withdrawal are documented to demonstrate compliance with our legal obligations, the legal basis is Art. 6(1)(c), read together with Art. 5(2) and Art. 7(1) GDPR. Evidence is retained only for as long as necessary for that purpose. Deleting a browser cookie does not automatically delete any separately stored consent record.
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:
This data is not merged with other data sources.
This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We use our hosting and email infrastructure to transmit and handle inquiries. Technical service providers acting on our behalf may obtain access to the extent necessary. Any further disclosure requires an applicable legal basis.
The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.
The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.
If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We use our hosting and email infrastructure to transmit and handle inquiries. Technical service providers acting on our behalf may obtain access to the extent necessary. Any further disclosure requires an applicable legal basis.
These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.
The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
If you request this or contact us through WhatsApp, we also use it for communication. WhatsApp is not a required contact channel; you can alternatively contact us by email or telephone. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The communication is encrypted end-to-end (peer-to-peer), which prevents WhatsApp or other third parties from gaining access to the communication content. However, WhatsApp does gain access to metadata created during the communication process (for example, sender, recipient, and time). We would also like to point out that WhatsApp has stated that it shares personal data of its users with its U.S.-based parent company Meta. Further details on data processing can be found in the WhatsApp privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.
The use of WhatsApp is based on our legitimate interest in communicating as quickly and effectively as possible with customers, interested parties and other business and contractual partners (Art. 6(1)(f) GDPR). If a corresponding consent has been requested, data processing is carried out exclusively on the basis of the consent; this consent may be revoked at any time with effect for the future.
The communication content exchanged between you and us on WhatsApp remains with us until you request us to delete it, revoke your consent to storage or the purpose for which the data is stored ceases to apply (e.g. after your request has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/7735.
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user.
Google Analytics can also evaluate usage events such as scrolling and clicks. The events collected depend on the respective configuration.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (in particular cookies). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
Use of this service requires your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may withdraw consent at any time with effect for the future.
Google explains the legal frameworks for its international data transfers at https://policies.google.com/privacy/frameworks?hl=en. Google LLC and the US subsidiaries covered by its certification participate in the EU-US Data Privacy Framework. For transfers not covered by an adequacy decision, Google identifies Standard Contractual Clauses as a safeguard where necessary.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.
According to Google, Google Analytics 4 does not log or store IP addresses from users in the EU, Switzerland, or the United Kingdom. For traffic from these regions, the IP address is used solely to derive approximate location data and is then immediately discarded. This location lookup takes place on servers in the EU, Switzerland, or the United Kingdom before the measurement data is forwarded to Analytics servers for further processing. Further information from Google.
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
We use Evalanche to manage and send our newsletter. The provider is SC-Networks GmbH, Würmstraße 4, 82319 Starnberg, Germany. This involves, in particular, processing the contact details supplied when subscribing, consent information, and subscription and unsubscription records. Further details about subscription, delivery and withdrawal are provided in the following “Newsletter” section.
The legal basis for processing data to send the newsletter is your consent under Art. 6(1)(a) GDPR. Where additional analytics functions store or access information on your device, § 25(1) TDDDG also applies. A legitimate interest in optimizing marketing activities does not replace any consent that is required.
If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter. We use these data to send the requested information. For this purpose, we use Evalanche as our technical newsletter service provider. The related data processing is described in the “Evalanche” section. Evalanche also offers functions for analyzing newsletter openings and link clicks. Use of such functions involving personal data requires appropriate consent; consent merely to receive the newsletter does not replace this.
The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address, and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.
The data you provide for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe. The data will be deleted from the newsletter distribution list after you unsubscribe or after the purpose for storing the data no longer applies. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR.
Data stored for other purposes with us remain unaffected.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Retention in the suppression list is limited to the period for which it is necessary to respect your objection to further mailings. You may object to the storage if your interests outweigh our legitimate interest.
This website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When an embedded YouTube video is loaded on one of our pages, a connection to YouTube's servers is established. As a result, the YouTube server will be notified, which of our pages you have visited.
Furthermore, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. Furthermore, the data collected will be processed in the Google advertising network.
If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
Loading embedded YouTube content and the associated processing of personal data require your consent under Art. 6(1)(a) GDPR. Where information is stored on or accessed from your device, § 25(1) TDDDG also applies. You may withdraw consent at any time with effect for the future.
For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.
We use Really Simple CAPTCHA to protect our contact forms against automated spam submissions. An image challenge is generated on our web server and your response is compared with the corresponding verification value. The image and verification files required for this are stored temporarily on our server. This CAPTCHA check does not transmit data to Google or to an external CAPTCHA service.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to protect our contact forms against abusive automated submissions and to enable genuine inquiries to be handled reliably. Please see “Server log files” for information about the technical connection data generated when a page is accessed.
We collect, process, and use personal customer and contract data for the establishment, content arrangement and modification of our contractual relationships. Data with personal references to the use of this website (usage data) will be collected, processed, and used only if this is necessary to enable the user to use our services or required for billing purposes. The legal basis for these processes is Art. 6(1)(b) GDPR.
The collected customer data shall be deleted upon completion of the order or termination of the business relationship and upon expiration of any existing statutory archiving periods. This shall be without prejudice to any statutory archiving periods.
We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.
Should content be exchanged, uploaded, or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards, and other information shared while using the service.
Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.
Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please directly contact the operators of the conference tools.
We employ the following conference tools:
We use Microsoft Teams. The provider is the Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/6474.
This section describes our participant portal for events held by Dominik Bösl. The controller is Innomancer GmbH, Olympiastraße 6a, 86179 Augsburg, Germany. For questions about your data and to exercise your rights, please contact us at info@boesl.org. The general information and data subject rights set out in this privacy policy also apply.
When you request materials, we process your email address, the associated event, the time of your request, and the status of provision and delivery. We do not collect your name or organisation for the materials service alone. You may provide these details separately and voluntarily if you request contact or authorise a quotation with attribution. We keep a record of the privacy information associated with your request and any consent you gave, including when and in which language you gave it. Technical verification values are also stored to secure access; the portal does not keep a separate detailed download history.
An email address is required to make a request through this portal. There is no statutory obligation to provide it. After a successful request, the materials are available immediately in the portal. We also email you a personal access link. Feedback, a contact request, and a testimonial are not conditions for access to the materials. Requesting materials does not give permission for ongoing advertising or newsletter emails.
The personal link allows you to access the materials again. Please keep it confidential and do not share it. Your email address is not verified through a separate confirmation step; the materials become available as soon as your request succeeds. Accessing the link is not a separate identity check either.
By making a request, you ask us to email you a personal access link and provide access to the materials for up to 30 days. This service is free. We process the information necessary for this service on the basis of Article 6(1)(b) GDPR. Optional feedback, contact requests and testimonials are processed only for the separate purposes described below.
You can submit ratings and written responses, select “I cannot or prefer not to assess this” for individual ratings, or skip the feedback section entirely. Your responses are transmitted only when you submit the materials request. We use them to evaluate and improve our talks and workshops. Please do not include sensitive information or unnecessary personal information about other people.
If you provide feedback, we store it together with your email address and the event. It is therefore not anonymous. This processing is based on your separate consent under Article 6(1)(a) GDPR. You must actively select the feedback consent checkbox, which is initially unchecked. Completing the answers alone does not give consent. If you do not consent, you can continue without feedback and still access the materials.
You can withdraw your feedback consent at any time with effect for the future by emailing info@boesl.org. We will stop further evaluation based on that consent and delete the relevant feedback. This does not affect your access to the materials. Withdrawal does not affect the lawfulness of processing based on that consent before it was withdrawn. A separate contact request or testimonial permission is not automatically withdrawn at the same time; please mention those too if you want your withdrawal to cover them.
We do not publish your feedback answers as a personal testimonial. Publication concerns only a quotation that you have separately authorised.
After you withdraw your feedback consent, we delete your ratings and free-text answers. We retain the consent wording, related evidence and a brief withdrawal record solely to document the consent and its proper termination until the material request’s existing deletion date. For new requests, this is no later than 30 days after the request; withdrawal does not extend that period. This limited record is based on Article 6(1)(c), in conjunction with Articles 5(2) and 7 GDPR. Your feedback will not be analysed further.
If you would like to speak with us, we use your email address, your name and organisation where provided, and your selected topics and message to handle your request. Your name, organisation, topics and message are optional. A contact request is not a newsletter subscription or general consent to advertising.
For enquiries about an offer or contract, the necessary processing is based on Article 6(1)(b) GDPR. We handle other conversations that you have requested on the basis of Article 6(1)(f) GDPR; our legitimate interest is to respond to your enquiry.
You may voluntarily authorise a quotation of your own for publication. Before giving permission, you see the wording and choose whether it may appear without your name, with your name, or also with your role and organisation. The separate consent checkbox, which is initially unchecked, applies only to that quotation and your chosen attribution, not to your other feedback. Your choice does not affect access to the materials.
Permission covers publication only on boesl.org and on Dominik Bösl’s personal LinkedIn profile. Other social media channels and presentation materials are not included. Publication is based on your separate consent under Article 6(1)(a) GDPR. Giving permission does not publish anything automatically: before using a quotation, we check the person, the exact wording, and the scope of the permission.
A published quotation with your chosen attribution is intended for the public and may be accessed worldwide, shared, or copied by others. If it is published on LinkedIn, the platform provider also receives the published information. For users in the European Economic Area, the provider identified in its Privacy Policy is LinkedIn Ireland Unlimited Company. Giving permission in the portal does not itself send your text to LinkedIn.
We store the quotation, attribution, consent wording and time, associated email address, relevant privacy information, processing status, and documented places of use separately from the other feedback. Even a quotation published without your name remains linked internally to your email address. If a quotation is changed, any previously used versions remain identifiable as separate cases requiring attention.
You may withdraw your testimonial consent at any time with effect for the future by emailing info@boesl.org. While your access to the materials remains valid, you can also use the withdrawal function in the portal. You may still withdraw by email afterwards. The lawfulness of earlier processing remains unaffected. We stop further use and handle removal from our publication locations and export copies. We cannot fully control copies already made by independent third parties. Withdrawing consent does not affect access to the materials.
LinkedIn also processes information outside the European Economic Area, particularly in the United States. For transfers to LinkedIn Corporation in the United States, LinkedIn refers to its participation in the EU–US Data Privacy Framework; for certain other transfers, it relies on European Commission Standard Contractual Clauses. Information about these transfers and how to request a copy of the clauses is available in LinkedIn’s international data transfer information. LinkedIn’s further processing is governed by its Privacy Policy and supplementary European privacy notice. Your publication permission does not authorise additional uses by us.
The social media references in the portal are ordinary links, not embedded social media plug-ins. The portal does not automatically send your form entries to LinkedIn. When you open an external link, the respective provider’s privacy information applies. A recommendation you write directly on LinkedIn is separate from permission to publish a testimonial through the portal. Links to other profiles do not expand that permission.
A request for materials does not result in a newsletter subscription. The portal’s newsletter-link function has not currently been approved for participant use. Before it is enabled in the future, information about the separate subscription and confirmation process will be added. The existing newsletter form on the main website is independent of this and is described in the “Newsletter” section.
The portal uses the bep_session cookie, which is valid for up to two hours. It contains a random identifier used to associate form requests with a session and protect against misuse. It is not an advertising or analytics cookie. We base the storage necessary for the expressly requested portal function on Section 25(2), no. 2 TDDDG; the associated processing of personal data is based on Article 6(1)(f) GDPR. Our interest is in secure and reliable operation.
To limit repeated requests, the portal processes identifiers derived using a key from the session identifier, IP address, or email address. The counters do not contain the original values; this does not automatically make the identifiers anonymous. The normal rate-limiting windows last one hour. Expired counters are removed during regular cleanup. Separate web and mail server logs are independent of these counters.
The standalone portal view does not use analytics or advertising services or embedded social media plug-ins. If you follow a link to the main website, its separately described services apply.
The portal information is stored in the WordPress database on the Hetzner server rented and operated by Innomancer GmbH. An external administrator maintains it on behalf of Innomancer GmbH. Access is restricted to people authorised to administer the portal and handle the information. Materials are held in a folder protected against direct web access. Personal access links are sent through the configured mail server from info@boesl.org. The receiving mail infrastructure you use also processes the message during delivery.
Weekly file and database backups are configured to restore the website if necessary. These backups may also contain portal data. They are stored in Google Drive through an account held by our web agency. Recipients therefore include the service providers responsible for website maintenance and backups, and the cloud storage service used. These backups support recovery and protection against data loss; our legitimate interest under Article 6(1)(f) GDPR is secure and reliable operation. Automatic backups are configured to retain two backup sets each. This does not mean deletion after a fixed 14-day period; additional manual copies are not automatically covered by this limit.
The separately planned automated testimonial exports are not currently enabled for real participant data. Before introducing this process, we will add the relevant information.
Google also processes data on servers outside the European Economic Area. Google explains its transfer mechanisms, including the EU–US Data Privacy Framework for Google LLC and, where applicable, standard contractual clauses, in its data transfer information. This provider information does not confirm the specific contractual and account settings of our agency account. Review of those settings and access countries with the agency has not yet been completed.
Web and mail server logs, mailboxes and manual backup copies are separate from the portal retention periods below. Their existing retention periods are being checked with the administrator; we do not promise that all these records are automatically deleted after 30 days. For information about records relating to your request, please contact info@boesl.org.
Deletion within the portal does not automatically remove emails, exports, publications, or backups. These records must be cleaned up separately according to their respective purpose and defined retention period. Following a restoration, deletions and withdrawals that have already taken effect must be applied again.
After withdrawal, we stop using your quotation. We temporarily retain the reference details and evidence needed to remove it from our publications and export copies. This is based on our duties to implement and document withdrawal under Article 6(1)(c), in conjunction with Articles 5(2), 7(3) and 17 GDPR. Once this process is complete, we delete information that is no longer needed. Only where there is a specific dispute or claim may necessary evidence be retained separately to establish, exercise or defend legal claims under Article 6(1)(f) GDPR. Our interest is resolving that particular case, and retention is limited accordingly.
Subject to the statutory conditions, your rights include access, rectification, deletion, restriction of processing, and data portability. You can withdraw consent at any time with effect for the future. You may object to processing based on legitimate interests on grounds relating to your particular situation; you may object to direct advertising at any time without giving a particular reason. Please contact info@boesl.org. Appropriate information may be needed to identify your request securely. You may also lodge a complaint with a data protection supervisory authority, in particular the Bavarian State Office for Data Protection Supervision.
The portal does not make automated decisions that produce legal or similarly significant effects within the meaning of Article 22 GDPR and does not carry out corresponding profiling. Technical checks of access, validity, and misuse limits are distinct from such decisions.
Dominik Bösl
Olympiastrasse 6a
DE-86179 Augsburg
Email info@boesl.org
Imprint Privacy Policy ©2026 | Dominik Bösl. All rights reserved.
