Privacy policy

The controller responsible for the processing of personal data on this website is:

PBM Personal Business Machine AG, Wilhelm-Mauser-Str. 14-16, 50827 Cologne, Germany. Email: info@personal-business-machine.com, phone: +49 221 429 141 10.

You can reach our data protection officer at: Sachverständigenbüro Mülot GmbH, Grüner Weg 80, 48268 Greven, Germany. Email: datenschutz@svb-muelot.de, phone: +49 2571 5402-0.

This privacy policy applies to the website personal-business-machine.com. It explains which personal data we process when you visit the website or contact us, for what purpose and on what legal basis. The applicable laws are the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

The processing of data in the PBM Campaign Platform on behalf of our customers is not covered by this policy. It is governed by the contracts with our customers.

This website is operated by a hosting provider in data centres in Germany. The provider processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Each time the website is accessed, the web server automatically processes data transmitted by your browser: IP address, date and time of access, page or file requested, referrer URL, amount of data transferred, status code as well as browser and operating system. We need this data to deliver the website and to ensure its secure and stable operation, for example to fend off attacks. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. The log files are deleted automatically after seven days at the latest; they are not combined with other data sources.

We do not use cookies for analytics or marketing purposes on this website, nor do we use any tracking or analytics services. Fonts, images and scripts are delivered from our own server; we do not embed third-party content such as videos, maps or social media plugins. The map on the contact page is a static image based on OpenStreetMap data. Consent pursuant to Section 25 TDDDG is therefore not required.

We refer to some third-party websites, such as LinkedIn, with simple links. Data is only transferred to these providers when you click a link and visit the provider’s website. The privacy policy of the respective provider applies there.

If you send us an enquiry using a form on this website (e.g. contact, demo request, partner enquiry), we process the details you enter – usually your name, business email address, company, industry, how you heard about us, your message and the page from which you submitted the form – in order to handle your enquiry and contact you. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract or at pre-contractual measures, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Mandatory fields are marked; without this information we cannot handle your enquiry.

To protect against misuse, we limit the number of enquiries per form and IP address. For this purpose, we store the IP address only as a hash value and only for ten minutes. The legal basis is our legitimate interest in preventing spam (Art. 6(1)(f) GDPR).

We use the CRM system HubSpot provided by HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA, to manage enquiries and customer relationships. Our web server transmits the form details directly to HubSpot, where they are stored in our HubSpot account. We do not use HubSpot cookies or HubSpot tracking scripts on this website for this purpose, and your IP address is not transmitted to HubSpot. HubSpot processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. If HubSpot is temporarily unavailable, your enquiry is sent to our mailbox by email instead.

If you contact us by email or phone, we process your details (e.g. name, contact details, content of the enquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR for enquiries in connection with a contract, and otherwise Art. 6(1)(f) GDPR. Complete confidentiality cannot be guaranteed for emails in transit; for confidential information we recommend sending it by post.

Apart from our responsible staff, the only recipients of your data are service providers who support us in operating the website and handling enquiries (hosting, CRM, email) and whom we have contractually bound as processors. We do not pass on data for advertising purposes or sell data.

Form details are stored on HubSpot servers in the USA. HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework; the transfer is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the European Commission’s standard contractual clauses have been agreed (Art. 46(2)(c) GDPR). Beyond this, we do not transfer any personal data to countries outside the EU or the EEA.

We only store personal data for as long as is necessary for the respective purpose. We store details from enquiries for as long as this is necessary to handle them and any resulting business relationship, and delete them once the purpose no longer applies or you object to the processing. Statutory retention obligations, in particular under commercial and tax law, remain unaffected.

You have the right of access to the data concerning you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, please use the contact details above.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons (Art. 21(2) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place on this website.

The website is delivered exclusively in encrypted form via HTTPS. We protect your data through technical and organisational measures, which we review regularly.

We will update this privacy policy when the website or the legal situation changes. The version published here applies.