Privacy Policy
Learn how BEC Robotics collects, uses, and protects your personal data with complete transparency, ensuring compliance, security, and trust across all interactions.
Home > Privacy Policy
BEC Robotics | Privacy Policy
June 2026
1. Introduction
Protecting personal data is an important part of our business operations. BEC GmbH processes personal data in accordance with the requirements of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable data protection legislation. This Privacy Policy explains how personal data is collected, processed, used, stored and protected when individuals visit our website, communicate with us, use our services, participate in events, subscribe to newsletters, submit applications or otherwise interact with BEC GmbH. Personal data means any information relating to an identified or identifiable natural person. Processing includes any operation performed on personal data, including collection, storage, organization, adaptation, retrieval, disclosure, transmission, restriction, deletion or destruction. Where this Privacy Policy refers to "BEC", "we", "our" or "us", it refers to BEC GmbH as the primary controller responsible for the processing activities described herein.
2. Controller
The controller responsible for the processing of personal data within the meaning of Article 4 No. 7 GDPR is BEC GmbH, Marktstr. 195, 72793 Pfullingen, Germany. BEC GmbH is the primary controller responsible for this website and the associated processing activities. BEC Medical GmbH and BEC Corp. are affiliated companies within the BEC group. Depending on the nature of a customer relationship, project, support engagement, supplier relationship or other business activity, these affiliated companies may participate in the provision of services and related processing activities. Such processing takes place exclusively within the scope permitted by applicable data protection legislation and based on appropriate contractual and organizational safeguards. General business inquiries may be directed to the contact channels published on our website. Questions relating specifically to privacy, personal data and data protection matters may be directed to privacy@bec-robotics.com.
3. Categories of Data Subjects
BEC has established a dedicated point of contact for privacy and data protection matters. Data subjects may contact BEC at privacy@bec-robotics.com regarding questions about the processing of personal data, requests relating to data subject rights, concerns regarding privacy practices, consent withdrawals or any other matters arising under applicable data protection legislation. Requests received through this contact channel will be reviewed and handled by the appropriate personnel within the organization and responded to in accordance with the requirements and timeframes established by applicable data protection laws. The use of this contact channel does not affect any statutory rights available to data subjects under the GDPR or other applicable legislation.
4. Categories of Personal Data
The categories of personal data processed may include identification data, contact information, communication records, contractual information, transaction data, project information, support records, marketing preferences, website usage information, technical device information, IP addresses, application documents and other information voluntarily provided to us. Where users submit information through contact forms, event registrations, newsletter subscriptions or support requests, we process the information necessary to provide the requested service and maintain the associated business relationship. As a general rule, BEC does not intentionally process special categories of personal data pursuant to Article 9 GDPR unless such processing is required by law, explicitly requested by the data subject or otherwise permitted under applicable legislation.
5. Purposes of Processing
Personal data is processed for the purpose of operating and securing our website, providing products and services, managing customer relationships, responding to inquiries, administering contracts, delivering customer support, organizing projects, managing supplier relationships, conducting recruitment activities, complying with legal obligations and protecting legitimate business interests. In addition, personal data may be processed for communication, marketing, lead management, newsletter distribution, event administration, website optimization, business analytics and customer relationship management where permitted by applicable law or where the required consent has been obtained. Where consent is required for a specific processing activity, personal data will only be processed after valid consent has been obtained and may be withdrawn at any time with effect for the future.
6. Legal Bases for Processing
The processing of personal data is carried out on one or more of the legal bases provided by the GDPR. Where processing is necessary for the performance of a contract or the implementation of pre-contractual measures requested by the data subject, processing is based on Article 6(1)(b) GDPR. Where processing is necessary to comply with legal obligations to which BEC is subject, processing is based on Article 6(1)(c) GDPR. Where processing is necessary for the purposes of legitimate interests pursued by BEC or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, processing is based on Article 6(1)(f) GDPR. Where consent is required, processing is based on Article 6(1)(a) GDPR and, where applicable, Section 25 TDDDG. Examples of processing activities based on consent include newsletter subscriptions, marketing communications, analytics technologies, advertising technologies and certain tracking services implemented on our website.
7. Security Measures
BEC implements appropriate technical and organizational measures in accordance with Article 32 GDPR in order to ensure a level of security appropriate to the risk associated with the processing of personal data. These measures include, among others, access controls, authorization concepts, encryption technologies, secure network architectures, backup procedures, logging mechanisms, security monitoring, vulnerability management and organizational procedures designed to protect the confidentiality, integrity, availability and resilience of information systems and personal data. Personal data transmitted between users and our systems is protected using industry-standard encryption technologies where appropriate. Access to personal data is restricted to individuals who require such access for legitimate business purposes and who are subject to confidentiality obligations. The effectiveness of security measures is reviewed regularly and adapted to technological developments, evolving threats and regulatory requirements.
8. Processors and Third Parties
BEC may engage carefully selected service providers to process personal data on its behalf. Such service providers act as processors pursuant to Article 28 GDPR and are contractually obligated to process personal data only in accordance with our documented instructions and applicable legal requirements. Processors may provide services relating to hosting, cloud infrastructure, communication systems, customer relationship management, marketing automation, recruitment systems, website operation, analytics, technical support and other business functions. Where personal data is disclosed to third parties acting as independent controllers, such disclosure takes place only where permitted by law, required for the performance of contractual obligations, based on legitimate interests or with the consent of the data subject. BEC does not sell personal data and does not disclose personal data to third parties for unrelated commercial purposes.
9. International Data Transfers
Personal data is generally processed within the European Union and the European Economic Area. However, certain service providers engaged by BEC may process personal data outside the European Economic Area. Where such international transfers occur, BEC ensures that an adequate level of protection is maintained in accordance with Articles 44 et seq. GDPR. Transfers may take place on the basis of an adequacy decision of the European Commission, the European Commission's Standard Contractual Clauses, binding corporate rules or other legally recognized transfer mechanisms. Prior to engaging service providers located outside the European Economic Area, BEC evaluates the applicable legal framework and implements supplementary technical and organizational safeguards where required. Further information regarding international data transfers can be requested from BEC at any time.
10. Rights of Data Subjects
Individuals whose personal data is processed by BEC have the rights granted under applicable data protection legislation. Subject to the statutory requirements, data subjects have the right to obtain information regarding the processing of their personal data, request correction of inaccurate data, request deletion of personal data, request restriction of processing, object to specific processing activities, withdraw previously granted consent and receive personal data in a structured, commonly used and machine-readable format. Furthermore, data subjects have the right to lodge a complaint with a competent supervisory authority if they believe that the processing of their personal data violates applicable data protection law. The exercise of these rights may be subject to legal limitations and exceptions under applicable legislation. Requests concerning access, rectification, erasure, restriction of processing, objection, data portability or withdrawal of consent may be submitted at any time to privacy@bec-robotics.com.
11. Withdrawal of Consent
Where processing is based on consent, data subjects have the right to withdraw their consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal became effective. Consent may be withdrawn through the mechanisms provided within the relevant service or by contacting BEC directly using the contact information provided in this Privacy Policy.
12. Right to Object
Where personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, data subjects have the right to object at any time to the processing of their personal data on grounds relating to their particular situation. Where personal data is processed for direct marketing purposes, data subjects have the right to object to such processing at any time without providing reasons. Following a valid objection, BEC will cease the affected processing activities unless compelling legitimate grounds exist that override the interests, rights and freedoms of the data subject or the processing serves the establishment, exercise or defense of legal claims.
13. Cookiebot Consent Management
BEC uses Cookiebot as its consent management platform to obtain, manage and document user consent for cookies, tracking technologies and similar processing activities. When users visit the website, Cookiebot displays a consent banner that allows users to make informed choices regarding the activation of non-essential cookies and technologies. Cookiebot records consent decisions, stores proof of consent where required and ensures that optional technologies are only activated after valid consent has been obtained. The use of Cookiebot is necessary to comply with GDPR and TDDDG requirements regarding consent management and transparency obligations.
14. Cookies and Similar Technologies
Our website uses cookies and comparable technologies to provide essential website functions, improve user experience, analyze website usage and support marketing activities. Cookies are small text files that are stored on a user's device and may contain identifiers, technical information and preference settings. Some cookies are technically necessary for the operation and security of the website, while others are used for analytics, personalization and marketing purposes. Where legally required, non-essential cookies and similar technologies are activated only after the user has provided consent through Cookiebot. Users may change or withdraw their consent preferences at any time through the consent management interface. Additional information regarding specific technologies used on the website is provided in the relevant sections of this Privacy Policy.
15. Data Retention and Deletion
BEC stores personal data only for as long as necessary to fulfill the purposes for which the data was collected, to comply with legal obligations or to establish, exercise or defend legal claims. Once the applicable purpose no longer exists and no statutory retention obligation applies, personal data is deleted, anonymized or otherwise rendered inaccessible. Commercial and tax law retention obligations remain unaffected and may require storage periods of up to ten years depending on the nature of the information concerned. Marketing and lead data is reviewed regularly and deleted or anonymized after three years without meaningful interaction unless contractual, legal or regulatory obligations require longer retention. Where deletion is not immediately possible due to legal requirements, processing of the affected data will be restricted until deletion becomes permissible.
16. Contractual Services
Where BEC enters into contractual relationships with customers, suppliers, service providers or other business partners, personal data is processed to establish, perform, manage and terminate such contractual relationships. The processing may include contact information, communication records, project information, contract documentation, billing information and other data necessary for the provision of products and services. Such processing is based primarily on Article 6(1)(b) GDPR where necessary for contractual performance and Article 6(1)(c) GDPR where legal obligations apply. In addition, certain processing activities may be based on Article 6(1)(f) GDPR where necessary to protect legitimate business interests, maintain customer relationships, improve service quality or manage business operations efficiently.
17. Contact Requests and Communications
When users contact BEC by email, website form, telephone, video conference, social media or other communication channels, the information provided is processed for the purpose of responding to the request, maintaining business communications and documenting relevant interactions. Depending on the nature of the request, the data processed may include contact information, company information, communication content, technical metadata and other information voluntarily provided by the user. Such processing is generally based on Article 6(1)(b) GDPR where the communication relates to contractual or pre-contractual matters and Article 6(1)(f) GDPR where processing is necessary to manage communications and business relationships efficiently. Communications may be documented and stored within the systems used by BEC for customer relationship management, support, project administration and business operations.
18. Odoo CRM, Marketing Automation and Website Tracking
BEC uses Odoo as its primary platform for customer relationship management, contact management, lead management, marketing automation, newsletter administration, website forms, website tracking and customer communications. Odoo is used to manage interactions with customers, prospective customers, business partners and other professional contacts throughout the lifecycle of a business relationship. Personal data processed within Odoo may include names, company information, contact details, communication history, project information, website interactions, marketing preferences, event participation records and information relating to business interests and requirements. Information submitted through website forms may be transferred directly to Odoo for further processing and follow-up activities. Odoo may also be used to administer newsletter subscriptions, organize marketing campaigns, measure engagement with communications and document customer interactions. Website interactions may be evaluated to better understand user interests, improve services and optimize business communications. Odoo is operated on infrastructure hosted exclusively within the European Union. Access to personal data stored within Odoo is restricted to authorized personnel who require access for legitimate business purposes. Processing is based on Article 6(1)(b) GDPR where necessary for contractual or pre-contractual activities, Article 6(1)(f) GDPR where processing serves legitimate business interests such as customer relationship management and business development, and Article 6(1)(a) GDPR where consent is required. Marketing and lead data processed within Odoo is reviewed regularly and deleted or anonymized after three years without meaningful interaction unless legal retention obligations, contractual requirements or legitimate business interests require longer storage.
19. HubSpot Support Services
BEC uses HubSpot exclusively for customer support, service management and contract-related communications with existing customers. HubSpot is not used as the primary CRM platform and is not used for lead generation, website tracking, website analytics, marketing automation, prospect management or newsletter administration. Personal data processed through HubSpot may include customer contact details, support tickets, service requests, communication records, technical support information and documentation necessary to fulfill contractual support obligations. The purpose of processing is to provide efficient support services, document service interactions, manage customer requests and ensure appropriate service quality. Processing is based primarily on Article 6(1)(b) GDPR where support activities are necessary for the performance of contractual obligations and Article 6(1)(f) GDPR where processing is necessary to ensure efficient support operations and maintain service quality. Appropriate contractual safeguards have been implemented with the service provider where required by applicable law.
20. Google Analytics
BEC uses Google Analytics to analyze the use of its website and to better understand how visitors interact with content, services and functionality. Google Analytics provides information regarding website traffic, visitor behavior, navigation paths, technical characteristics of devices and general usage patterns. The information obtained helps BEC improve website performance, optimize user experience, identify technical issues and evaluate the effectiveness of content and communication activities. Google Analytics is activated only after the user has provided consent through the consent management platform. Without such consent, no analytics processing takes place that requires consent under applicable law. The processing of personal data in connection with Google Analytics is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Users may withdraw their consent at any time through the consent management interface without affecting the lawfulness of processing carried out before the withdrawal.
21. Google Tag Manager
BEC uses Google Tag Manager to manage and deploy website tags and integrations. Google Tag Manager serves solely as a technical management system that enables the controlled implementation of analytics, marketing and functionality-related services on the website. Google Tag Manager itself does not create user profiles, perform independent tracking activities or store personal data for its own purposes. The platform facilitates the implementation of other technologies and ensures that consent preferences selected by users can be respected consistently across the website. Where technologies managed through Google Tag Manager require consent, they are activated only after the necessary consent has been obtained through Cookiebot.
22. Facebook Pixel and Custom Audiences
BEC may use Meta technologies including Facebook Pixel and Custom Audiences for marketing, conversion measurement, campaign optimization and audience management purposes. These technologies help BEC understand whether users interact with advertisements, visit the website following advertising campaigns or engage with content relevant to BEC's products and services. The information collected may be used to evaluate marketing effectiveness, improve advertising relevance and create audience segments for future campaigns. Processing takes place only after users have provided the required consent through the consent management platform. The legal basis for this processing is Article 6(1)(a) GDPR and Section 25(1) TDDDG. Users may withdraw their consent at any time through the consent management interface. BEC does not receive information that directly identifies individual users through these technologies but may receive aggregated reports and campaign statistics.
23. LinkedIn Insight Tag
BEC uses the LinkedIn Insight Tag to measure the effectiveness of LinkedIn advertising campaigns, understand interactions with website content and improve communication with professional audiences. The LinkedIn Insight Tag may collect information relating to website visits, interactions with content, device characteristics and referral sources. The resulting information allows BEC to evaluate campaign performance, identify relevant target groups and improve business communications directed toward professional users. Processing occurs only after consent has been provided through the consent management platform and is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Users may withdraw their consent at any time. Data processing associated with LinkedIn technologies may involve processing activities carried out by LinkedIn under its own responsibility in accordance with LinkedIn's applicable privacy documentation.
24. Microsoft 365, Exchange Online, Microsoft Teams and OneDrive
BEC uses Microsoft 365 as a central platform for communication, collaboration, document management and business operations. This includes the use of Exchange Online for email communication, Microsoft Teams for meetings, collaboration and messaging, and OneDrive for secure document storage and file sharing. Personal data processed within Microsoft 365 may include contact information, communication records, calendar information, documents, meeting content, collaboration data and other information necessary for the conduct of business activities. These services are used to facilitate communication with customers, suppliers, business partners and employees, to manage projects and documents and to ensure efficient business operations. Processing is based on Article 6(1)(b) GDPR where necessary for contractual relationships, Article 6(1)(f) GDPR where processing supports legitimate business interests and Article 6(1)(c) GDPR where legal obligations require the processing of business records. Appropriate technical and organizational measures are implemented to protect personal data processed within Microsoft 365 environments.
25. Newsletter and Marketing Communications
BEC may provide newsletters, event invitations, product updates, technical information, industry insights and other business-related communications to customers, prospective customers, partners and other interested parties. Where required by applicable law, newsletters and marketing communications are sent only after the recipient has provided valid consent. In certain cases, communications may also be sent on the basis of existing customer relationships where permitted by applicable law. Personal data processed for these purposes may include name, company information, contact details, communication preferences, subscription status and interaction data relating to previously distributed communications. BEC may evaluate whether recipients open newsletters, access linked content or interact with communications in order to improve relevance, optimize communication strategies and maintain accurate subscription records. Recipients may withdraw consent and unsubscribe from marketing communications at any time using the unsubscribe functionality included in communications or by contacting BEC directly. Following a valid withdrawal or unsubscribe request, personal data used exclusively for marketing purposes will no longer be used for such communications unless another legal basis applies.
26. HRworks and Recruitment Processing
BEC uses HRworks to manage recruitment activities and applicant administration. When individuals apply for employment opportunities at BEC, personal data submitted as part of the application process is processed for the purpose of evaluating qualifications, conducting recruitment activities, communicating with applicants and making employment decisions. Depending on the nature of the application, personal data may include contact information, curriculum vitae, educational records, professional qualifications, employment history, references, correspondence and other information voluntarily provided by applicants. Processing is based on Article 6(1)(b) GDPR, Section 26 BDSG and, where applicable, Article 88 GDPR. Access to applicant data is restricted to authorized personnel involved in recruitment and human resources activities. Unless a longer retention period is required by law or consent has been provided for inclusion in a talent pool, applicant data will generally be deleted within six months after completion of the recruitment process. Where applicants consent to inclusion in a talent pool, the relevant information may be retained for a longer period as specified at the time consent is obtained.
27. Social Media Presence
BEC maintains professional profiles and business presences on social media platforms including LinkedIn, Facebook, Instagram, YouTube and XING. These platforms are used to communicate with customers, prospective customers, business partners, applicants and the broader public, to share information about products and services, to provide company updates and to support recruitment and marketing activities. When users visit or interact with BEC's social media pages, personal data may be processed both by BEC and by the respective platform provider. The processing activities carried out by the platform operators are governed by their respective privacy policies and terms of use. BEC may receive aggregated statistics and usage information regarding interactions with its social media content but generally does not receive direct access to personal profiles unless users actively communicate with BEC through the relevant platform. Users should be aware that social media providers may process personal data outside the European Economic Area and may use personal data for their own advertising, analytics and business purposes.
28. Embedded Content and Third-Party Services
Certain areas of the website may incorporate content, services or functionality provided by third parties. Such integrations may include YouTube videos, Vimeo videos, Google Maps, Google Fonts, Google reCAPTCHA and similar technologies. The integration of such services may require the transmission of technical information, including IP addresses and browser-related information, to the respective service provider in order to display content, verify security measures or provide requested functionality. Where legally required, such services are activated only after the user has provided consent through the consent management platform. The purpose of these integrations is to improve website functionality, provide multimedia content, enhance security and deliver a more effective user experience. Where third-party providers process personal data under their own responsibility, the applicable privacy policies of those providers govern the corresponding processing activities.
29. Website Security and Log Files
In order to ensure the security, stability and proper functioning of the website, BEC processes technical information relating to website access and system usage. Such information may include IP addresses, browser information, operating system details, access timestamps, requested resources, referring URLs and system-generated log data. The processing of such information is necessary to detect technical faults, investigate security incidents, prevent unauthorized access, maintain system integrity and ensure reliable website operation. Processing is based on Article 6(1)(f) GDPR and serves the legitimate interests of maintaining secure and reliable information systems. Log files are retained only for as long as necessary to achieve these purposes unless longer retention is required for legal, security or evidentiary reasons.
30. Data Protection by Design and by Default
BEC takes data protection requirements into account during the planning, development, implementation and operation of business processes, information systems and digital services. Technical and organizational measures are implemented in accordance with Article 25 GDPR to ensure that personal data is processed only to the extent necessary for the respective purpose. Privacy-enhancing measures, access controls, security mechanisms and governance procedures are reviewed regularly to ensure continued compliance with applicable legal requirements and industry best practices.
31. Amendments to this Privacy Policy
BEC reserves the right to amend this Privacy Policy where necessary to reflect legal, regulatory, technical or organizational changes. Amendments may become necessary due to changes in applicable legislation, modifications to business processes, implementation of new technologies, introduction of additional services or changes to existing processing activities. The current version of the Privacy Policy will always be made available on the website. Users are encouraged to review the Privacy Policy periodically to remain informed about how personal data is processed.
32. Contact Regarding Data Protection
Questions concerning this Privacy Policy, the processing of personal data or the exercise of data subject rights may be directed to BEC using the contact information provided in this Privacy Policy. Requests relating to access, correction, deletion, restriction of processing, objection, data portability or withdrawal of consent will be handled in accordance with applicable data protection legislation and within the legally prescribed timeframes.
33. Final Provisions
This Privacy Policy applies to all processing activities described herein unless a more specific privacy notice is provided for a particular service, application process, contractual relationship or business activity. Should individual provisions of this Privacy Policy become invalid or unenforceable, the validity of the remaining provisions shall remain unaffected. This Privacy Policy shall be interpreted in accordance with the requirements of the GDPR, the BDSG, the TDDDG and other applicable data protection laws.
Protecting personal data is an important part of our business operations. BEC GmbH processes personal data in accordance with the requirements of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable data protection legislation. This Privacy Policy explains how personal data is collected, processed, used, stored and protected when individuals visit our website, communicate with us, use our services, participate in events, subscribe to newsletters, submit applications or otherwise interact with BEC GmbH. Personal data means any information relating to an identified or identifiable natural person. Processing includes any operation performed on personal data, including collection, storage, organization, adaptation, retrieval, disclosure, transmission, restriction, deletion or destruction. Where this Privacy Policy refers to "BEC", "we", "our" or "us", it refers to BEC GmbH as the primary controller responsible for the processing activities described herein.
2. Controller
The controller responsible for the processing of personal data within the meaning of Article 4 No. 7 GDPR is BEC GmbH, Marktstr. 195, 72793 Pfullingen, Germany. BEC GmbH is the primary controller responsible for this website and the associated processing activities. BEC Medical GmbH and BEC Corp. are affiliated companies within the BEC group. Depending on the nature of a customer relationship, project, support engagement, supplier relationship or other business activity, these affiliated companies may participate in the provision of services and related processing activities. Such processing takes place exclusively within the scope permitted by applicable data protection legislation and based on appropriate contractual and organizational safeguards. General business inquiries may be directed to the contact channels published on our website. Questions relating specifically to privacy, personal data and data protection matters may be directed to privacy@bec-robotics.com.
3. Categories of Data Subjects
BEC has established a dedicated point of contact for privacy and data protection matters. Data subjects may contact BEC at privacy@bec-robotics.com regarding questions about the processing of personal data, requests relating to data subject rights, concerns regarding privacy practices, consent withdrawals or any other matters arising under applicable data protection legislation. Requests received through this contact channel will be reviewed and handled by the appropriate personnel within the organization and responded to in accordance with the requirements and timeframes established by applicable data protection laws. The use of this contact channel does not affect any statutory rights available to data subjects under the GDPR or other applicable legislation.
4. Categories of Personal Data
The categories of personal data processed may include identification data, contact information, communication records, contractual information, transaction data, project information, support records, marketing preferences, website usage information, technical device information, IP addresses, application documents and other information voluntarily provided to us. Where users submit information through contact forms, event registrations, newsletter subscriptions or support requests, we process the information necessary to provide the requested service and maintain the associated business relationship. As a general rule, BEC does not intentionally process special categories of personal data pursuant to Article 9 GDPR unless such processing is required by law, explicitly requested by the data subject or otherwise permitted under applicable legislation.
5. Purposes of Processing
Personal data is processed for the purpose of operating and securing our website, providing products and services, managing customer relationships, responding to inquiries, administering contracts, delivering customer support, organizing projects, managing supplier relationships, conducting recruitment activities, complying with legal obligations and protecting legitimate business interests. In addition, personal data may be processed for communication, marketing, lead management, newsletter distribution, event administration, website optimization, business analytics and customer relationship management where permitted by applicable law or where the required consent has been obtained. Where consent is required for a specific processing activity, personal data will only be processed after valid consent has been obtained and may be withdrawn at any time with effect for the future.
6. Legal Bases for Processing
The processing of personal data is carried out on one or more of the legal bases provided by the GDPR. Where processing is necessary for the performance of a contract or the implementation of pre-contractual measures requested by the data subject, processing is based on Article 6(1)(b) GDPR. Where processing is necessary to comply with legal obligations to which BEC is subject, processing is based on Article 6(1)(c) GDPR. Where processing is necessary for the purposes of legitimate interests pursued by BEC or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, processing is based on Article 6(1)(f) GDPR. Where consent is required, processing is based on Article 6(1)(a) GDPR and, where applicable, Section 25 TDDDG. Examples of processing activities based on consent include newsletter subscriptions, marketing communications, analytics technologies, advertising technologies and certain tracking services implemented on our website.
7. Security Measures
BEC implements appropriate technical and organizational measures in accordance with Article 32 GDPR in order to ensure a level of security appropriate to the risk associated with the processing of personal data. These measures include, among others, access controls, authorization concepts, encryption technologies, secure network architectures, backup procedures, logging mechanisms, security monitoring, vulnerability management and organizational procedures designed to protect the confidentiality, integrity, availability and resilience of information systems and personal data. Personal data transmitted between users and our systems is protected using industry-standard encryption technologies where appropriate. Access to personal data is restricted to individuals who require such access for legitimate business purposes and who are subject to confidentiality obligations. The effectiveness of security measures is reviewed regularly and adapted to technological developments, evolving threats and regulatory requirements.
8. Processors and Third Parties
BEC may engage carefully selected service providers to process personal data on its behalf. Such service providers act as processors pursuant to Article 28 GDPR and are contractually obligated to process personal data only in accordance with our documented instructions and applicable legal requirements. Processors may provide services relating to hosting, cloud infrastructure, communication systems, customer relationship management, marketing automation, recruitment systems, website operation, analytics, technical support and other business functions. Where personal data is disclosed to third parties acting as independent controllers, such disclosure takes place only where permitted by law, required for the performance of contractual obligations, based on legitimate interests or with the consent of the data subject. BEC does not sell personal data and does not disclose personal data to third parties for unrelated commercial purposes.
9. International Data Transfers
Personal data is generally processed within the European Union and the European Economic Area. However, certain service providers engaged by BEC may process personal data outside the European Economic Area. Where such international transfers occur, BEC ensures that an adequate level of protection is maintained in accordance with Articles 44 et seq. GDPR. Transfers may take place on the basis of an adequacy decision of the European Commission, the European Commission's Standard Contractual Clauses, binding corporate rules or other legally recognized transfer mechanisms. Prior to engaging service providers located outside the European Economic Area, BEC evaluates the applicable legal framework and implements supplementary technical and organizational safeguards where required. Further information regarding international data transfers can be requested from BEC at any time.
10. Rights of Data Subjects
Individuals whose personal data is processed by BEC have the rights granted under applicable data protection legislation. Subject to the statutory requirements, data subjects have the right to obtain information regarding the processing of their personal data, request correction of inaccurate data, request deletion of personal data, request restriction of processing, object to specific processing activities, withdraw previously granted consent and receive personal data in a structured, commonly used and machine-readable format. Furthermore, data subjects have the right to lodge a complaint with a competent supervisory authority if they believe that the processing of their personal data violates applicable data protection law. The exercise of these rights may be subject to legal limitations and exceptions under applicable legislation. Requests concerning access, rectification, erasure, restriction of processing, objection, data portability or withdrawal of consent may be submitted at any time to privacy@bec-robotics.com.
11. Withdrawal of Consent
Where processing is based on consent, data subjects have the right to withdraw their consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal became effective. Consent may be withdrawn through the mechanisms provided within the relevant service or by contacting BEC directly using the contact information provided in this Privacy Policy.
12. Right to Object
Where personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, data subjects have the right to object at any time to the processing of their personal data on grounds relating to their particular situation. Where personal data is processed for direct marketing purposes, data subjects have the right to object to such processing at any time without providing reasons. Following a valid objection, BEC will cease the affected processing activities unless compelling legitimate grounds exist that override the interests, rights and freedoms of the data subject or the processing serves the establishment, exercise or defense of legal claims.
13. Cookiebot Consent Management
BEC uses Cookiebot as its consent management platform to obtain, manage and document user consent for cookies, tracking technologies and similar processing activities. When users visit the website, Cookiebot displays a consent banner that allows users to make informed choices regarding the activation of non-essential cookies and technologies. Cookiebot records consent decisions, stores proof of consent where required and ensures that optional technologies are only activated after valid consent has been obtained. The use of Cookiebot is necessary to comply with GDPR and TDDDG requirements regarding consent management and transparency obligations.
14. Cookies and Similar Technologies
Our website uses cookies and comparable technologies to provide essential website functions, improve user experience, analyze website usage and support marketing activities. Cookies are small text files that are stored on a user's device and may contain identifiers, technical information and preference settings. Some cookies are technically necessary for the operation and security of the website, while others are used for analytics, personalization and marketing purposes. Where legally required, non-essential cookies and similar technologies are activated only after the user has provided consent through Cookiebot. Users may change or withdraw their consent preferences at any time through the consent management interface. Additional information regarding specific technologies used on the website is provided in the relevant sections of this Privacy Policy.
15. Data Retention and Deletion
BEC stores personal data only for as long as necessary to fulfill the purposes for which the data was collected, to comply with legal obligations or to establish, exercise or defend legal claims. Once the applicable purpose no longer exists and no statutory retention obligation applies, personal data is deleted, anonymized or otherwise rendered inaccessible. Commercial and tax law retention obligations remain unaffected and may require storage periods of up to ten years depending on the nature of the information concerned. Marketing and lead data is reviewed regularly and deleted or anonymized after three years without meaningful interaction unless contractual, legal or regulatory obligations require longer retention. Where deletion is not immediately possible due to legal requirements, processing of the affected data will be restricted until deletion becomes permissible.
16. Contractual Services
Where BEC enters into contractual relationships with customers, suppliers, service providers or other business partners, personal data is processed to establish, perform, manage and terminate such contractual relationships. The processing may include contact information, communication records, project information, contract documentation, billing information and other data necessary for the provision of products and services. Such processing is based primarily on Article 6(1)(b) GDPR where necessary for contractual performance and Article 6(1)(c) GDPR where legal obligations apply. In addition, certain processing activities may be based on Article 6(1)(f) GDPR where necessary to protect legitimate business interests, maintain customer relationships, improve service quality or manage business operations efficiently.
17. Contact Requests and Communications
When users contact BEC by email, website form, telephone, video conference, social media or other communication channels, the information provided is processed for the purpose of responding to the request, maintaining business communications and documenting relevant interactions. Depending on the nature of the request, the data processed may include contact information, company information, communication content, technical metadata and other information voluntarily provided by the user. Such processing is generally based on Article 6(1)(b) GDPR where the communication relates to contractual or pre-contractual matters and Article 6(1)(f) GDPR where processing is necessary to manage communications and business relationships efficiently. Communications may be documented and stored within the systems used by BEC for customer relationship management, support, project administration and business operations.
18. Odoo CRM, Marketing Automation and Website Tracking
BEC uses Odoo as its primary platform for customer relationship management, contact management, lead management, marketing automation, newsletter administration, website forms, website tracking and customer communications. Odoo is used to manage interactions with customers, prospective customers, business partners and other professional contacts throughout the lifecycle of a business relationship. Personal data processed within Odoo may include names, company information, contact details, communication history, project information, website interactions, marketing preferences, event participation records and information relating to business interests and requirements. Information submitted through website forms may be transferred directly to Odoo for further processing and follow-up activities. Odoo may also be used to administer newsletter subscriptions, organize marketing campaigns, measure engagement with communications and document customer interactions. Website interactions may be evaluated to better understand user interests, improve services and optimize business communications. Odoo is operated on infrastructure hosted exclusively within the European Union. Access to personal data stored within Odoo is restricted to authorized personnel who require access for legitimate business purposes. Processing is based on Article 6(1)(b) GDPR where necessary for contractual or pre-contractual activities, Article 6(1)(f) GDPR where processing serves legitimate business interests such as customer relationship management and business development, and Article 6(1)(a) GDPR where consent is required. Marketing and lead data processed within Odoo is reviewed regularly and deleted or anonymized after three years without meaningful interaction unless legal retention obligations, contractual requirements or legitimate business interests require longer storage.
19. HubSpot Support Services
BEC uses HubSpot exclusively for customer support, service management and contract-related communications with existing customers. HubSpot is not used as the primary CRM platform and is not used for lead generation, website tracking, website analytics, marketing automation, prospect management or newsletter administration. Personal data processed through HubSpot may include customer contact details, support tickets, service requests, communication records, technical support information and documentation necessary to fulfill contractual support obligations. The purpose of processing is to provide efficient support services, document service interactions, manage customer requests and ensure appropriate service quality. Processing is based primarily on Article 6(1)(b) GDPR where support activities are necessary for the performance of contractual obligations and Article 6(1)(f) GDPR where processing is necessary to ensure efficient support operations and maintain service quality. Appropriate contractual safeguards have been implemented with the service provider where required by applicable law.
20. Google Analytics
BEC uses Google Analytics to analyze the use of its website and to better understand how visitors interact with content, services and functionality. Google Analytics provides information regarding website traffic, visitor behavior, navigation paths, technical characteristics of devices and general usage patterns. The information obtained helps BEC improve website performance, optimize user experience, identify technical issues and evaluate the effectiveness of content and communication activities. Google Analytics is activated only after the user has provided consent through the consent management platform. Without such consent, no analytics processing takes place that requires consent under applicable law. The processing of personal data in connection with Google Analytics is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Users may withdraw their consent at any time through the consent management interface without affecting the lawfulness of processing carried out before the withdrawal.
21. Google Tag Manager
BEC uses Google Tag Manager to manage and deploy website tags and integrations. Google Tag Manager serves solely as a technical management system that enables the controlled implementation of analytics, marketing and functionality-related services on the website. Google Tag Manager itself does not create user profiles, perform independent tracking activities or store personal data for its own purposes. The platform facilitates the implementation of other technologies and ensures that consent preferences selected by users can be respected consistently across the website. Where technologies managed through Google Tag Manager require consent, they are activated only after the necessary consent has been obtained through Cookiebot.
22. Facebook Pixel and Custom Audiences
BEC may use Meta technologies including Facebook Pixel and Custom Audiences for marketing, conversion measurement, campaign optimization and audience management purposes. These technologies help BEC understand whether users interact with advertisements, visit the website following advertising campaigns or engage with content relevant to BEC's products and services. The information collected may be used to evaluate marketing effectiveness, improve advertising relevance and create audience segments for future campaigns. Processing takes place only after users have provided the required consent through the consent management platform. The legal basis for this processing is Article 6(1)(a) GDPR and Section 25(1) TDDDG. Users may withdraw their consent at any time through the consent management interface. BEC does not receive information that directly identifies individual users through these technologies but may receive aggregated reports and campaign statistics.
23. LinkedIn Insight Tag
BEC uses the LinkedIn Insight Tag to measure the effectiveness of LinkedIn advertising campaigns, understand interactions with website content and improve communication with professional audiences. The LinkedIn Insight Tag may collect information relating to website visits, interactions with content, device characteristics and referral sources. The resulting information allows BEC to evaluate campaign performance, identify relevant target groups and improve business communications directed toward professional users. Processing occurs only after consent has been provided through the consent management platform and is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Users may withdraw their consent at any time. Data processing associated with LinkedIn technologies may involve processing activities carried out by LinkedIn under its own responsibility in accordance with LinkedIn's applicable privacy documentation.
24. Microsoft 365, Exchange Online, Microsoft Teams and OneDrive
BEC uses Microsoft 365 as a central platform for communication, collaboration, document management and business operations. This includes the use of Exchange Online for email communication, Microsoft Teams for meetings, collaboration and messaging, and OneDrive for secure document storage and file sharing. Personal data processed within Microsoft 365 may include contact information, communication records, calendar information, documents, meeting content, collaboration data and other information necessary for the conduct of business activities. These services are used to facilitate communication with customers, suppliers, business partners and employees, to manage projects and documents and to ensure efficient business operations. Processing is based on Article 6(1)(b) GDPR where necessary for contractual relationships, Article 6(1)(f) GDPR where processing supports legitimate business interests and Article 6(1)(c) GDPR where legal obligations require the processing of business records. Appropriate technical and organizational measures are implemented to protect personal data processed within Microsoft 365 environments.
25. Newsletter and Marketing Communications
BEC may provide newsletters, event invitations, product updates, technical information, industry insights and other business-related communications to customers, prospective customers, partners and other interested parties. Where required by applicable law, newsletters and marketing communications are sent only after the recipient has provided valid consent. In certain cases, communications may also be sent on the basis of existing customer relationships where permitted by applicable law. Personal data processed for these purposes may include name, company information, contact details, communication preferences, subscription status and interaction data relating to previously distributed communications. BEC may evaluate whether recipients open newsletters, access linked content or interact with communications in order to improve relevance, optimize communication strategies and maintain accurate subscription records. Recipients may withdraw consent and unsubscribe from marketing communications at any time using the unsubscribe functionality included in communications or by contacting BEC directly. Following a valid withdrawal or unsubscribe request, personal data used exclusively for marketing purposes will no longer be used for such communications unless another legal basis applies.
26. HRworks and Recruitment Processing
BEC uses HRworks to manage recruitment activities and applicant administration. When individuals apply for employment opportunities at BEC, personal data submitted as part of the application process is processed for the purpose of evaluating qualifications, conducting recruitment activities, communicating with applicants and making employment decisions. Depending on the nature of the application, personal data may include contact information, curriculum vitae, educational records, professional qualifications, employment history, references, correspondence and other information voluntarily provided by applicants. Processing is based on Article 6(1)(b) GDPR, Section 26 BDSG and, where applicable, Article 88 GDPR. Access to applicant data is restricted to authorized personnel involved in recruitment and human resources activities. Unless a longer retention period is required by law or consent has been provided for inclusion in a talent pool, applicant data will generally be deleted within six months after completion of the recruitment process. Where applicants consent to inclusion in a talent pool, the relevant information may be retained for a longer period as specified at the time consent is obtained.
27. Social Media Presence
BEC maintains professional profiles and business presences on social media platforms including LinkedIn, Facebook, Instagram, YouTube and XING. These platforms are used to communicate with customers, prospective customers, business partners, applicants and the broader public, to share information about products and services, to provide company updates and to support recruitment and marketing activities. When users visit or interact with BEC's social media pages, personal data may be processed both by BEC and by the respective platform provider. The processing activities carried out by the platform operators are governed by their respective privacy policies and terms of use. BEC may receive aggregated statistics and usage information regarding interactions with its social media content but generally does not receive direct access to personal profiles unless users actively communicate with BEC through the relevant platform. Users should be aware that social media providers may process personal data outside the European Economic Area and may use personal data for their own advertising, analytics and business purposes.
28. Embedded Content and Third-Party Services
Certain areas of the website may incorporate content, services or functionality provided by third parties. Such integrations may include YouTube videos, Vimeo videos, Google Maps, Google Fonts, Google reCAPTCHA and similar technologies. The integration of such services may require the transmission of technical information, including IP addresses and browser-related information, to the respective service provider in order to display content, verify security measures or provide requested functionality. Where legally required, such services are activated only after the user has provided consent through the consent management platform. The purpose of these integrations is to improve website functionality, provide multimedia content, enhance security and deliver a more effective user experience. Where third-party providers process personal data under their own responsibility, the applicable privacy policies of those providers govern the corresponding processing activities.
29. Website Security and Log Files
In order to ensure the security, stability and proper functioning of the website, BEC processes technical information relating to website access and system usage. Such information may include IP addresses, browser information, operating system details, access timestamps, requested resources, referring URLs and system-generated log data. The processing of such information is necessary to detect technical faults, investigate security incidents, prevent unauthorized access, maintain system integrity and ensure reliable website operation. Processing is based on Article 6(1)(f) GDPR and serves the legitimate interests of maintaining secure and reliable information systems. Log files are retained only for as long as necessary to achieve these purposes unless longer retention is required for legal, security or evidentiary reasons.
30. Data Protection by Design and by Default
BEC takes data protection requirements into account during the planning, development, implementation and operation of business processes, information systems and digital services. Technical and organizational measures are implemented in accordance with Article 25 GDPR to ensure that personal data is processed only to the extent necessary for the respective purpose. Privacy-enhancing measures, access controls, security mechanisms and governance procedures are reviewed regularly to ensure continued compliance with applicable legal requirements and industry best practices.
31. Amendments to this Privacy Policy
BEC reserves the right to amend this Privacy Policy where necessary to reflect legal, regulatory, technical or organizational changes. Amendments may become necessary due to changes in applicable legislation, modifications to business processes, implementation of new technologies, introduction of additional services or changes to existing processing activities. The current version of the Privacy Policy will always be made available on the website. Users are encouraged to review the Privacy Policy periodically to remain informed about how personal data is processed.
32. Contact Regarding Data Protection
Questions concerning this Privacy Policy, the processing of personal data or the exercise of data subject rights may be directed to BEC using the contact information provided in this Privacy Policy. Requests relating to access, correction, deletion, restriction of processing, objection, data portability or withdrawal of consent will be handled in accordance with applicable data protection legislation and within the legally prescribed timeframes.
33. Final Provisions
This Privacy Policy applies to all processing activities described herein unless a more specific privacy notice is provided for a particular service, application process, contractual relationship or business activity. Should individual provisions of this Privacy Policy become invalid or unenforceable, the validity of the remaining provisions shall remain unaffected. This Privacy Policy shall be interpreted in accordance with the requirements of the GDPR, the BDSG, the TDDDG and other applicable data protection laws.