Privacy Policy

Last update: February 25, 2025

1. Introduction and General Information

We are very pleased about your interest in our company. Protecting your personal data is of the utmost importance to us. You can generally use our website without providing any personal information. However, if you wish to use special services offered on our website, it may become necessary to process personal data. If there is no legal basis for such processing, we will obtain the affected person’s consent.

We always process personal data (e.g., name, address, email address, or phone number) in accordance with the General Data Protection Regulation (GDPR) and any applicable national data protection provisions. This Privacy Policy is designed to inform you—both as a data subject and as a member of the public—about the nature, scope, and purpose of the personal data we collect, use, and process. It also explains the rights to which you are entitled.

We have implemented technical and organizational measures to ensure the most gap-free protection possible for personal data processed through our website. However, internet-based data transmissions may be subject to security vulnerabilities, which means absolute protection cannot be guaranteed. If you feel unsure, you are free to submit personal data to us through alternative means (e.g., by telephone).

2. Responsible Entity

Responsible entity within the meaning of the GDPR

Alеxander Rеzun
Athеnеr Str. 5
60327 Frankfurt am Main
Email: contact@bene.biz

The responsible entity, either alone or jointly with others, decides on the purposes and means of processing personal data.

3. Definitions of Key Terms

Our Privacy Policy aims to be easy to read and understand for all—visitors, customers, and business partners. Therefore, we will explain some important GDPR terms:

  • Personal data: All information referring to an identified or identifiable natural person (data subject) (e.g., name, address, online identifier, location data).
  • Data subject: Any identified or identifiable natural person whose personal data we process.
  • Processing: Any operation in connection with personal data, such as collection, recording, storage, modification, use, transmission, or deletion.
  • Restriction of processing: The marking of stored personal data with the aim of restricting its future processing.
  • Profiling: Any type of automated processing of personal data intended to evaluate certain personal aspects (e.g., interests, behavior, location) relating to a natural person.
  • Pseudonymization: The processing of personal data in such a way that it can no longer be attributed to a specific individual without the use of additional information.
  • Controller (Responsible Person): The natural or legal person, public authority, institution, or other body that, alone or jointly with others, determines the purposes and means of processing personal data.
  • Processor: A natural or legal person, public authority, institution, or other body that processes personal data on behalf of the controller.
  • Recipient: A natural or legal person, public authority, institution, or other body to whom personal data is disclosed.
  • Third party: A natural or legal person, public authority, institution, or other body, other than the data subject, the controller, or the processor, authorized to process personal data.
  • Consent: A freely given, specific, informed, and unambiguous indication by the data subject of their agreement to the processing of their personal data.

4. Hosting and External Services

a) Microsoft Azure

Our website is hosted by Microsoft Azure (“Azure”). Personal data collected on this website is stored on Azure’s servers. This may include IP addresses, contact requests, metadata and communications data, or other data you enter on our website. Azure processes such data only according to our instructions and to the extent necessary to fulfill its service obligations.

b) Microsoft® Power BI

We occasionally embed content from Microsoft® Power BI to display interactive reports or visualizations. When such embedded content is accessed, information (e.g., IP address, technical information about the browser or device) may be transmitted to Microsoft.

5. General Information on Data Processing

Legal bases of processing:
We process personal data based on, among others, the following legal grounds:

  • Art. 6(1)(a) GDPR (Consent) – if you give us explicit consent.
  • Art. 6(1)(b) GDPR (Contract Fulfillment) – if processing is necessary for fulfilling a contract with you.
  • Art. 6(1)(c) GDPR (Legal Obligation) – if we are legally obligated to process data (e.g., for tax purposes).
  • Art. 6(1)(d) GDPR (Vital Interests) – if processing is necessary to protect someone’s vital interests (e.g., in an emergency).
  • Art. 6(1)(f) GDPR (Legitimate Interests) – if processing is required to safeguard the legitimate interests of our company or a third party, provided your fundamental rights do not override these interests.

Duration of storage:
Unless otherwise specified, we store your personal data only for as long as it is needed to fulfill the given purpose or as long as we are legally required to do so. The data is then routinely blocked or deleted.

Note about possible security vulnerabilities:
We employ technical and organizational security measures to protect your data as thoroughly as possible. Nonetheless, Internet-based data transmission can never be absolutely secure.

6. Data Collection on Our Website

a) Server Log Files

Our hosting provider (Azure) automatically collects information that your browser transmits to us. This data is stored in so-called server log files. This may include:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The legal basis for this data processing is Art. 6(1)(f) GDPR, as we have a legitimate interest in the technically error-free presentation and optimization of our website.

b) Cookies

Our website uses cookies. These are small text files that are stored on your device by your browser.

  • Necessary cookies: These are indispensable for operating the website and are set without consent.
  • Optional cookies: (e.g., for analytical purposes) are only set if you explicitly agree or select them accordingly.

If we do not offer a cookie banner with choice options, only necessary cookies will be used. You can disable cookies in your browser settings at any time, although this may restrict the website’s functionality.

7. Integration of Third-Party Content

a) YouTube

On certain pages, we embed videos from the YouTube platform (a service provided by Google LLC). When accessing a page with an embedded YouTube video, a connection is established to YouTube’s servers. In doing so, information (e.g., IP address, accessed page) may be transmitted to YouTube/Google. If you are logged in to YouTube, YouTube automatically assigns this information to your user account.

For more information on data protection at Google/YouTube, please visit: https://policies.google.com/privacy

b) Microsoft® Power BI (Detailed)

As mentioned above, we use Microsoft® Power BI to display interactive data visualizations. We embed it using so-called embed links or iframes. When calling up such content, data (e.g., IP address, technical device information) is transmitted to Microsoft. This data processing is based on our legitimate interest in offering an appealing and effective online presentation (Art. 6(1)(f) GDPR), unless another legal basis (e.g., your consent) applies.

8. Analysis Tool: Azure Application Insights

We use Azure Application Insights (a Microsoft service) to monitor our website’s performance and detect errors. In this process, anonymized telemetry data (e.g., page views, loading times, error messages) is collected and stored in Azure. Personal data is generally not stored, unless you yourself enter such data in free-text fields (e.g., via a contact form).

For more information on Microsoft’s data protection, please visit: https://privacy.microsoft.com/de-de

9. Contacting Us

If you contact us by email or via a contact form, the personal data you provide (e.g., name, email address, message) will be stored for processing your inquiry and for possible follow-up questions. The legal basis for processing this data is Art. 6(1)(b) GDPR if it concerns the initiation or performance of a contract, or Art. 6(1)(f) GDPR (legitimate interest in processing your request).

10. Rights of the Data Subject

As a data subject, you have various rights under the GDPR, which you may assert at any time:

  • Right to confirmation and access (Art. 15 GDPR): Information about which of your data is stored and a copy of that data.
  • Right to rectification (Art. 16 GDPR): Immediate correction of inaccurate data or completion of incomplete data.
  • Right to erasure (Art. 17 GDPR): The right to have your personal data deleted, provided no exceptions apply.
  • Right to restriction of processing (Art. 18 GDPR): Restriction of data processing if certain requirements are met.
  • Right to data portability (Art. 20 GDPR): The right to receive your data in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21 GDPR): The right to object at any time to processing operations based on Art. 6(1)(e) or (f) GDPR.
  • Right to withdraw (Art. 7(3) GDPR): The right to withdraw your previously granted consent with effect for the future.
  • Right to lodge a complaint (Art. 77 GDPR): The right to file a complaint with a supervisory authority if you suspect a violation of the law.

11. Applications and Application Process

If you apply to us (e.g., by email), we will process your application data (e.g., contact and qualification data) solely for the purpose of handling the application process. The legal basis here is Section 26 of the German Federal Data Protection Act (BDSG) or Art. 6(1)(b) GDPR.

If an employment contract is concluded, your data will be stored in accordance with legal requirements. If we reject your application, we generally delete your application data no later than two months after the conclusion of the application process, unless a legitimate interest in deletion is opposed (e.g., burden of proof under the General Equal Treatment Act).

12. Technical and Organizational Measures

We take numerous technical and organizational measures to ensure a high level of protection for your personal data. Nevertheless, internet-based data transmission may be subject to security gaps, so absolute protection cannot be guaranteed. If you wish to avoid such risks, you may provide us with personal data by other means (e.g., telephone).

13. Updates and Changes to This Privacy Policy

This Privacy Policy is currently valid (as of February 25, 2025). We reserve the right to make changes in the future, especially if our website or services change or if legal requirements change. You can always find the latest version on our website.

Questions about data protection?
If you have any questions or comments about our Privacy Policy or wish to assert any of your rights, please contact contact@bene.biz. We will be happy to assist you.