Privacy Policy
Version: June 2026
Controller
The controller within the meaning of Article 4(7) of the General Data Protection Regulation, GDPR, is:
BMB Rheinland GmbH
Liefergasse 4
40213 Düsseldorf
Germany
Telephone: +49 (0)211 9726 918.0
E.mail: info@bmbrheinlandgmbh.com
Represented by the Managing Director:
Dr. Bijan Baharlooei Bardshahi
General Information
We take the protection of personal data seriously. This Privacy Policy explains which personal data we process when you visit our corporate website or contact us, for which purposes such data are processed, on which legal bases the processing is carried out, and which rights you have as a data subject.
This website is a corporate information website of BMB Rheinland GmbH. It is not an online shop. No direct online sales, online payments, customer accounts, checkout processes, or delivery orders are processed through this website.
Categories of Personal Data
We may process in particular the following categories of personal data:
master and contact data, including name, company name, address, telephone number, e.mail address, and function within the company,
communication data, including the content of enquiries, correspondence, messages, and related business communication,
enquiry and quotation data, including details of requests for information, requests for quotations, technical enquiries, and commercial enquiries,
usage and technical data generated when visiting the website, including IP address, date and time of access, volume of data transferred, browser type, operating system, referrer URL, visited pages, and similar technical information.
Purposes of Processing and Legal Bases
We process personal data for the following purposes and on the following legal bases:
Processing for the initiation of business relationships, the handling of enquiries, the preparation of quotations, and communication prior to or during a contractual relationship is carried out on the basis of Article 6(1)(b) GDPR.
Processing for compliance with legal obligations, in particular commercial, tax law, and statutory retention obligations, is carried out on the basis of Article 6(1)(c) GDPR.
Processing for the protection of our legitimate interests or the legitimate interests of a third party, in particular the proper handling of commercial enquiries, the security and stability of our website, IT security, prevention of misuse, and documentation of business communication, is carried out on the basis of Article 6(1)(f) GDPR.
Where processing is based on consent, it is carried out on the basis of Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.
Website Hosting by Wix
This website is created and hosted using the platform of Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, and its affiliated companies.
When the website is accessed, personal data, in particular technical data such as IP address, browser information, date and time of access, and similar usage data, may be processed on Wix servers in order to display the website, ensure its technical functionality, maintain security, and prevent misuse.
Wix acts as a service provider and processor for the technical operation of the website. Processing is carried out on the basis of Article 6(1)(f) GDPR, our legitimate interest in providing a secure, stable, and functional corporate website. Where required, the processing relationship with Wix is governed by a data processing agreement pursuant to Article 28 GDPR.
Contact by E.mail, Telephone, Contact Form, or Quote Request
If you contact us by e.mail, telephone, contact form, or request for quotation, we process the personal data you provide for the purpose of handling your enquiry and conducting any subsequent business communication.
The legal basis is Article 6(1)(b) GDPR where the communication relates to the initiation or performance of a contract. In all other cases, the legal basis is Article 6(1)(f) GDPR, our legitimate interest in receiving, reviewing, processing, and responding to commercial and business related enquiries.
Depending on the content of your enquiry, your message may be forwarded internally to the responsible department or person within BMB Rheinland GmbH, for example sales, commercial administration, management, legal coordination, or technical support.
Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Technically necessary cookies may be used without prior consent where they are strictly necessary to provide the website, ensure security, maintain sessions, or enable basic technical functions. The legal basis for the use of technically necessary cookies is Section 25(2) TDDDG and Article 6(1)(f) GDPR.
Non essential cookies, in particular cookies used for analytics, statistics, marketing, external media, or similar purposes, are used only where you have given your prior consent. The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future. The exact cookies and technologies used may depend on the configuration of the website and the services activated through Wix.
Recipients of Personal Data and Service Providers
Within BMB Rheinland GmbH, personal data are made available only to those persons or departments that require access in order to fulfil contractual, pre.contractual, legal, or business related obligations.
We may use external service providers, in particular website hosting providers, IT service providers, communication service providers, and professional advisors. Where these service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 GDPR, where required.
Personal data are not sold to third parties.
International Transfers
A transfer of personal data to countries outside the European Union and the European Economic Area may occur in connection with the use of international service providers, in particular Wix and its affiliated companies.
Such transfers take place only where permitted by law, where an adequacy decision of the European Commission exists, where appropriate safeguards within the meaning of Article 46 GDPR are in place, in particular the European Commission's Standard Contractual Clauses, or where another legal basis permits the transfer.
Retention Periods
We retain personal data only for as long as necessary for the purposes for which the data were collected, unless statutory retention obligations or legitimate interests require longer storage.
Business and tax relevant documents and correspondence may be retained in accordance with statutory retention obligations, in particular under Section 257 HGB and Section 147 AO, generally for up to ten years.
General contact enquiries without contractual relevance are usually deleted no later than three years after the end of the calendar year in which the last communication took place, unless a longer retention period is required due to legal obligations, the establishment, exercise, or defence of legal claims, or another legitimate reason.
Server log data are generally deleted after a short technical retention period, unless longer storage is necessary to investigate security incidents, prevent misuse, or protect the technical operation of the website.
Rights of Data Subjects
As a data subject, you have the following rights under the conditions of the GDPR:
the right of access pursuant to Article 15 GDPR,
the right to rectification pursuant to Article 16 GDPR,
the right to erasure pursuant to Article 17 GDPR,
the right to restriction of processing pursuant to Article 18 GDPR,
the right to data portability pursuant to Article 20 GDPR,
the right to object pursuant to Article 21 GDPR.
To exercise your rights, you may contact us using the contact details stated above under Controller.
Withdrawal of Consent
Where processing is based on your consent, you have the right to withdraw such consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.
Right to Object Pursuant to Article 21 GDPR
Where personal data are processed on the basis of Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing.
Where personal data are processed for direct marketing purposes, you have an unconditional right to object at any time. In such case, we will no longer process your personal data for direct marketing purposes.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for BMB Rheinland GmbH in North Rhine.Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein.Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Website: www.ldi.nrw.de
Automated Decision Making
Automated decision making within the meaning of Article 22 GDPR, including profiling, does not take place.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time if legal, technical, or business requirements change. The version published on this website shall apply.