Privacy Policy

Here you will find all the necessary information regarding the processing and protection of your data.

1. Data protection at a glance

General information

Protecting your personal data is important to us. The following information provides an overview of what happens to your personal data when you visit our website.

Personal data is any data that can be used to personally identify you.

Data collection on this website

Data processing on this website is carried out by the website operator:

BOB Bobolowski GmbH
Robert-Bosch-Str. 3
79585 Steinen
Germany

Phone: +49 7627 923 76 0
Email: info@bobolowski.com

Represented by the Managing Director, Silvio Bobolowski.

How do we collect your data?

Some of your data is collected when you provide it to us. This applies in particular to data that you enter into a contact or service form.

Other data is processed automatically by our IT systems when you visit the website. This primarily involves technical data such as your browser type, operating system, the time the page was accessed, or your IP address.

What do we use your data for?

Processing is carried out primarily to ensure the technically error-free and secure provision of the website, as well as to process inquiries that you send to us via our contact and service forms or by other means.

2. Controller

The controller responsible for data protection under the General Data Protection Regulation (GDPR) is:

BOB Bobolowski GmbH
Robert-Bosch-Str. 3
79585 Steinen
Germany

Phone: +49 7627 923 76 0
Email: info@bobolowski.com

Represented by the Managing Director, Silvio Bobolowski.

3. Hosting and provision of the website

This website is created and hosted using Webflow.

The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.

When you visit our website, technically necessary data may be processed. This includes, in particular, your IP address, browser and device information, the time of access, pages visited, and other technical connection data.

Processing is carried out to ensure the secure, stable, and efficient provision of our website on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the reliable and secure provision of our website.

As Webflow is a company based in the USA, the processing of personal data outside the European Union or the European Economic Area cannot be ruled out. Where necessary, data transfer is carried out on the basis of the data protection guarantees provided for this purpose.

For more information on how Webflow processes data, please refer to Webflow's privacy policy.

4. Server log files

When you visit our website, information may be automatically processed by the hosting provider in so-called server log files.

This may include, in particular:

  • IP address
  • Browser type and version
  • Operating system used
  • Referrer URL
  • Page or file accessed
  • Date and time of access
  • Volume of data transferred

This data is processed to ensure the technical provision, stability, and security of the website, as well as to detect and prevent potential attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in maintaining a secure and functional website.

5. Contacting us

Contact form

If you contact us via a form provided on this website, we process the data you enter to handle your request.

This may include, in particular:

  • Name
  • Company
  • Email address
  • Phone number
  • Nature or subject of your inquiry
  • Content of your message
  • additional information provided voluntarily

If your inquiry is directed toward the conclusion or performance of a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR.

For other inquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling and answering of incoming inquiries.

The transmitted data will be deleted as soon as the purpose of the processing no longer applies and there are no statutory retention obligations to the contrary.

Contacting us by email or telephone

If you contact us by email or telephone, we process the personal data you provide in order to process and respond to your inquiry.

The legal basis depends on the content of your inquiry. For contract-related or pre-contractual inquiries, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in handling incoming inquiries in accordance with Art. 6(1)(f) GDPR.

6. Cloudflare Turnstile

We use Cloudflare Turnstile to protect our forms from automated access, spam, and abuse.

The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Turnstile is used to determine whether an input is made by a human or by an automated process. Technical information such as your IP address, browser and device information, and other data required for abuse detection may be processed.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website, and in particular our forms, from spam, automated access, and abuse.

When using Cloudflare, a transfer of data to the USA cannot be ruled out. Where necessary, this transfer is carried out on the basis of the data protection safeguards provided for this purpose.

7. External libraries and Content Delivery Networks

For certain functions and the display of our website, external technical libraries may be integrated via Content Delivery Networks (CDNs).

When such resources are retrieved, a connection to the servers of the respective CDN provider may be established. In this process, technical information such as your IP address, browser details, and device information may be processed.

Where external libraries are provided via jsDelivr, their integration serves the purpose of efficiently and reliably providing the resources required for the website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a technically reliable and high-performance website.

8. Cookies and technically necessary storage

Our website may use technically necessary cookies or similar storage technologies, provided they are required for the provision and functionality of the website.

Technically necessary storage is based on Section 25(2) of the TDDDG. Any subsequent processing of personal data is based on Art. 6(1)(f) GDPR, where applicable.

If services requiring consent are used in the future, they will only be deployed after the corresponding consent has been obtained.

9. Applications

When you apply for a position with us and provide us with personal data, we process this data for the purpose of conducting the application process.

This may include, in particular, contact details, your CV, qualifications, certificates, and other application documents you have submitted.

The legal basis for processing within the scope of an application process is Section 26 of the German Federal Data Protection Act (BDSG) in conjunction with Art. 6(1)(b) GDPR.

If no employment relationship is established, application documents will generally be deleted after the conclusion of the application process, provided that no legal obligations or legitimate interests prevent such deletion.

If you explicitly consent to the longer storage of your application, for example for a talent pool, further processing will be based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

10. Storage Duration

Unless a more specific storage period is stated in this privacy policy, we only store personal data for as long as it is necessary for the respective processing purpose.

If statutory retention requirements exist, the relevant data will be stored for the duration of the respective statutory retention period and subsequently deleted, provided there is no other legal basis for further processing.

11. Legal Basis for Processing

Depending on the specific processing operation, personal data is processed in particular on the basis of the following provisions:

Art. 6(1)(a) GDPR, provided that you have given your consent to the processing.

Art. 6(1)(b) GDPR, provided that processing is necessary for the performance of a contract or to take steps prior to entering into a contract.

Art. 6(1)(c) GDPR, provided that processing is necessary for compliance with a legal obligation.

Art. 6(1)(f) GDPR, provided that processing is necessary to protect our legitimate interests or the legitimate interests of a third party, and these are not overridden by your interests or fundamental rights and freedoms.

12. Your Rights

Under applicable legal provisions, you have the following rights regarding your personal data:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent with effect for the future pursuant to Art. 7(3) GDPR

You can contact us at any time to exercise your rights.

13. Right to object

If the processing of your personal data is based on Art. 6(1)(e) or (f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing at any time for reasons arising from your particular situation.

If personal data is processed for the purpose of direct marketing, you have the right to object to the processing for the purpose of such marketing at any time.

14. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

In principle, the data protection supervisory authority of the federal state in which our company is based is responsible. You may also contact another data protection supervisory authority that has jurisdiction over you.

15. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can identify an encrypted connection by the fact that the address line of your browser begins with "https://".

16. Changes to this privacy policy

We reserve the right to update this privacy policy if the services used, legal requirements, or the processing of personal data change.

The version currently published on this website applies.

‍