Status: July 2026

Thank you for your interest in our website. Protecting your personal data is important to us. Below we inform you about which data we process when you visit this website and for what purpose.

1. Controller

The controller as defined by the General Data Protection Regulation (GDPR) is:

Bedifol GmbH Byk-Gulden-Straße 2 // 12 78467 Konstanz Germany

Phone: +49 (7531) 12738 10

Fax: +49 (7531) 12738 98

Email: info@bedifol.com

2. Data Protection Officer

You can contact our company data protection officer at:

Matthias Herkert Bedifol GmbH

Byk-Gulden-Straße 2 // 12

78467 Konstanz

Email: datenschutzbeauftragter@bedifol.com

3. Hosting

This website is hosted and delivered via the Framer service of Framer B.V., Keizersgracht 585, 1017 DR Amsterdam, Netherlands. Framer provides the technical infrastructure through which this website and its integrated content (e.g. images and videos) are accessed.

When you access the website, technically necessary data is processed (see Section 4). The legal basis is our legitimate interest in providing our online services securely and efficiently in accordance with Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.

Framer uses infrastructure to deliver the website where a transfer of personal data to the USA cannot be excluded. Insofar as such a transfer takes place, it is based on the adequacy decision of the EU Commission for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and additionally on standard contractual clauses in accordance with Art. 46 (2) (c) GDPR.

4. Access Data / Server Log Files

Each time you access this website, information transmitted by your browser is automatically recorded. This usually includes:

• Your (potentially truncated) IP address

• Date and time of access

• Name and URL of the retrieved file

• Amount of data transferred

• Notification of successful retrieval

• Browser type and version used, as well as the operating system

• The previously visited page (referrer)

This data is processed to ensure trouble-free operation, guarantee security and optimise the service. The legal basis is Art. 6 (1) (f) GDPR. The log files are deleted after 7 days.

5. Cookies

This website only uses technically necessary cookies or comparable technologies required for the website to function and be provided securely. We do not use cookies for statistical, analytical or marketing purposes.

The legal basis for using technically necessary cookies is Section 25 (2) (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR. Your consent is not required for this, meaning a cookie banner is not necessary.

6. Contacting Us

When you contact us via the contact form or by email, we process the data you provide – in the contact form, this is your name, company, email address, phone number and message – to handle your request.

The data entered into the form is processed via the Framer infrastructure and transmitted to us by email. It is not stored by third parties beyond this.

The legal basis is Art. 6 (1) (b) GDPR if your request is aimed at entering into or performing a contract. Otherwise, it is our legitimate interest in responding to your enquiry in accordance with Art. 6 (1) (f) GDPR. We will delete your data once your request has been fully processed, provided there are no statutory retention obligations.

7. Career Section (External Forwarding)

The career section of this website links to an external applicant portal operated by a third party. We have no influence over their data processing. When you access the external service, the privacy policy of that respective provider applies. No personal data is collected on this website in connection with job applications.

8. External Content

External content (e.g. embedded third-party videos, map services, analysis tools, newsletters) is currently not used. The videos shown on the page are delivered via the Framer infrastructure (see Section 3).

The fonts used are embedded in our Framer project and delivered via the Framer infrastructure (see Section 3). No connection is made to external font providers such as Google Fonts.

9. Recipients / Transfer of Data

Your data will only be transferred to third parties if this is necessary to fulfil a contract, if you have consented, or if we are legally obliged to do so. We only use processors (e.g. our hosting provider, see Section 3) on the basis of a contract in accordance with Art. 28 GDPR.

10. Your Rights

You have the following rights under the GDPR:

• Information about your processed personal data (Art. 15 GDPR)

• Rectification of incorrect or incomplete data (Art. 16 GDPR)

• Erasure of your data (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to processing, provided this is based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

• Withdrawal of consent given, with future effect (Art. 7 (3) GDPR)

• Lodging a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please use the contact details provided in Section 1 or 2.

The competent supervisory authority for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg Lautenschlagerstraße 20, 70173 Stuttgart

11. Right to Object

If we process personal data based on legitimate interests (Art. 6 (1) (f) GDPR), you can object to this processing at any time for reasons arising from your particular situation. If the processing is for direct marketing purposes, you can object at any time without giving reasons.

12. Data Security

We take technical and organisational measures to protect your data. Please note that data transmission over the Internet can have security gaps. Absolute protection against access by third parties is not possible.

13. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements. The version published on this website at any given time shall apply.