Privacy Policy
1. Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws, as well as other data protection regulations, is:
bhv Verlag GmbH
Langenhecke 17
53902 Bad Münstereifel
Germany
Phone: +49 (0)2253 – 92822 25
Email: info@bhv.de
Website: www.bhv.de
Managing Director and Data Protection Officer: Dieter Dedeke
2. General Information on Data Processing
Scope of the processing of personal data
We generally process our users’ personal data only to the extent necessary to provide a fully functional website and our content and services. The processing of personal data is typically carried out only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.
Legal Basis for Processing
To the extent that we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis. When processing personal data necessary for the performance of a contract, Article 6(1)(b) of the GDPR serves as the legal basis. To the extent that processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis.
Data Deletion and Retention Period
The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
3. Hosting
This website is hosted on servers operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located exclusively in Germany. Hetzner Online GmbH is our data processor pursuant to Article 28 of the GDPR. A Data Processing Agreement (DPA) has been entered into with the hosting provider.
Server log files
The hosting provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the connecting computer
- Time of the server request
- IP address
This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the technical integrity and optimization of its website—to this end, server log files must be collected. The log files are automatically deleted after 14 days at the latest.
4. Data Protection When Contacting Us by Email or Phone
Our website lists clickable email addresses and phone numbers. If you contact us by email or phone, we will store the information you provide—including your name, email address, phone number, and the content of your inquiry—for the purpose of processing your inquiry and in case we have any follow-up questions.
We will not share this data without your consent. The processing of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effectively processing inquiries directed to it. If your inquiry is aimed at entering into a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
The data you provide will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., once your inquiry has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
5. Product Catalog (WooCommerce)
This website uses WooCommerce, a plugin provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WooCommerce is used on this website solely as a product catalog. There is no ordering function, customer account, or collection of personal data via the catalog. No personal data is processed through the operation of the catalog.
6. PDF Downloads
PDF documents (e.g., product information, instructions) are available for download on our website. We do not collect or store any personal data when you download these files. For technical reasons, the hosting provider (Hetzner Online GmbH) may log the download in its server log files (see Section 3).
7. Licensing Consultant – Data Protection
Our website features an interactive license advisor. It runs entirely within the user’s browser (on the client side). No data is transmitted to our servers or to external services. No personal data is collected, stored, or processed.
Save as PDF / Print
The shopping list created in the License Advisor can be saved as a PDF or printed using the browser's built-in print function. This process is entirely the responsibility of the user and their operating system. We do not receive any data in this process.
Share via email
You can share the shopping list via email using a mailto: link. This will open the default email program installed on the user’s device. The email data is processed exclusively by the user and their email program. We do not receive any data in this process.
Share via WhatsApp
You can share the shopping list via WhatsApp using a wa.me link. Clicking this link opens the WhatsApp app on the user’s device. In doing so, data may be transmitted to WhatsApp (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). We have no control over this data transfer and do not receive any data in the process. For information on data protection at WhatsApp, please visit: https://www.whatsapp.com/legal/privacy-policy-eea
8. YouTube videos (privacy-friendly mode)
Our website features videos from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. All YouTube videos are embedded exclusively in the privacy-friendly mode embedded via the domain youtube-nocookie.com. According to YouTube, this means that YouTube does not set any cookies as long as the video is not played.
As soon as you play a YouTube video on our website, a connection is established with YouTube’s servers. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to link your browsing activity directly to your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is based on our legitimate interest in presenting our online services in an appealing manner, in accordance with Article 6(1)(f) of the GDPR. Where consent has been obtained, processing is based exclusively on Article 6(1)(a) of the GDPR. For more information on data protection at YouTube, please refer to Google’s Privacy Policy at: https://policies.google.com/privacy
9. BSI (CERT-Bund) RSS feed
This website automatically displays security advisories from the RSS feed of the Federal Office for Information Security (BSI), Godesberger Allee 185–189, 53175 Bonn, in a widget in the right-hand sidebar (https://wid.cert-bund.de/content/public/securityAdvisory/rss).
When you load this page, your browser automatically connects to the BSI’s servers to retrieve the latest RSS feed. For technical reasons, your IP address is transmitted to the BSI’s server during this process. We have no control over this data transfer. The rights to the embedded content remain with the BSI. No guarantee is provided for the accuracy, completeness, or timeliness of the embedded reports. Only the original information published on the BSI’s official website is authoritative.
The legal basis for this integration is Article 6(1)(f) of the GDPR (legitimate interest in providing up-to-date security information to our users).
10. Yoast SEO
This website uses the free version of the Yoast SEO plugin from Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, Netherlands. The plugin is used for search engine optimization of this website. Since no Yoast account is linked to the installation and the free version is being used, no usage data is transmitted to Yoast. This plugin does not process any personal data.
11. Rights of the Data Subject
You have the following rights with respect to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR) Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
If the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent supervisory authority for North Rhine-Westphalia is:
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de
12. Data Security
During your visit to our website, we use the widely adopted SSL (Secure Sockets Layer) or TLS (Transport Layer Security) protocol in conjunction with the highest encryption level supported by your browser. You can tell whether a specific page on our website is being transmitted securely by the presence of a key or padlock icon in the browser address bar.
13. Validity and Changes to This Privacy Policy
This Privacy Policy is currently in effect and is as of April 2026.
Due to ongoing improvements to our website and the services we offer through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The most current version of the Privacy Policy can be viewed and printed at any time on our website at www.bhv.de.