Privacy Policy

1. Controller and contact

If you have questions about data protection or want to exercise your rights, you can reach me by email.

info@bonovation.de

2. Visiting the website and server logs

When you open this website, technically necessary connection data is sent to the servers that deliver it. This includes in particular the IP address, the time of access, the address requested, the response status and the details your browser transmits about the browser, the operating system and, where applicable, the page visited before.

The web server logs requests and technical errors. This serves to deliver the website, to analyse errors and to protect against misuse. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is secure and reliable operation. The connection data is technically necessary to retrieve the website.

The website runs on a server that I operate myself in a data centre in Frankfurt am Main, Germany. The infrastructure is provided by ispOne business GmbH, Weissdornweg 3, 77955 Ettenheim, Germany. No data is transferred to countries outside the European Economic Area when you open the website.

Retention: the proxy server in front passes encrypted requests (HTTPS) on to the web server unchanged and does not log them. It logs only unencrypted requests (HTTP), which are redirected to HTTPS, with the IP address, time, method and response status, but not the address requested. This log is rotated daily and deleted after 14 days. The web server logs are rotated daily and deleted after 14 days; they contain only the internal address of the proxy server, not your IP address. Mail server logs are deleted after 10 days. I do not create backups of these logs or of the mailbox.

3. Inquiry form and contact by email

When you send the inquiry form, I process your name, your email address and your message in order to answer your inquiry. The details are transmitted over an encrypted connection to a service that I operate on this server and are delivered from there as an email to info@bonovation.de. The website itself does not store the inquiry in a database. I also operate the mail server and the mailbox myself on this server in Frankfurt am Main.

Providing these details is voluntary; you are under no legal or contractual obligation to do so. Without a name, an email address and a message, however, I cannot answer an inquiry.

To protect against misuse, the service checks whether the form was filled in automatically (a field that is invisible to people and a minimum time between opening and sending) and limits the number of inquiries per IP address. For this purpose the IP address is held in memory for at most one hour and is not stored permanently. No cookies are set and no third-party services are involved.

Alternatively, you can write an email directly. An email link opens your email program; the details you provide are transmitted only when you send a message there.

Where the inquiry concerns a contract with you or steps prior to a contract at your request, processing is based on Art. 6(1)(b) GDPR. For other inquiries it is based on Art. 6(1)(f) GDPR and the legitimate interest in handling business inquiries; for the protection against misuse, the legitimate interest is the secure operation of the form.

I delete inquiries that do not lead to a collaboration no later than six months after the last contact. If a collaboration follows, I keep the correspondence for its duration and afterwards only as far as statutory retention obligations apply (for business letters generally six years, Section 147 of the German Fiscal Code). This retention is based on Art. 6(1)(c) GDPR. Please do not send confidential or sensitive documents when you first get in touch.

4. Cookies, analytics and local display

The current implementation of this website sets no cookies of its own and stores no information in local storage or session storage. No analytics or marketing services, newsletters, maps or social media plugins are integrated. The switch between German and English is an ordinary link and stores no setting.

Fonts are not loaded from external font providers; they are delivered from this server together with the website. Project images and preview images are local image files. The “Copy email” function writes the displayed address to the clipboard only after your click. The website does not read the clipboard. The decorative animation runs in the browser; mouse movements affect the display locally and are neither stored by this application nor sent to a server.

5. YouTube channel and videos

The website links to the Bonovation Lab YouTube channel. The link is opened only when you click it. Google’s privacy policy applies to data processing on YouTube.

Where videos are embedded on this website, a two-click solution is used: at first only a local preview image is shown. Only when you explicitly load the video does your browser connect to youtube-nocookie.com. In doing so, your IP address and technical details of your browser in particular are transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may store or read information on your device and transfer data to Google LLC in the USA. According to its own statements, Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision; where a transfer is not covered by it, Google relies on standard contractual clauses.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give by loading the video. Without this click, no connection to YouTube is made. This website does not remember the consent; when you open the page again, only the preview image is shown.

Google’s privacy policy

Google’s information on data transfers

6. Links to external websites

This website links to project websites, to my LinkedIn profile and to the YouTube channel. These are ordinary links: only when you click one does your browser connect to the respective provider; before that, no data is transmitted there. The privacy information of the respective service applies to data processing there. The shops and booking systems of the project websites are not embedded in this website.

7. Your rights

Subject to the respective statutory requirements, you have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can withdraw consent you have given at any time with effect for the future (Art. 7(3)).

Where data is processed on the basis of legitimate interests, you can object on grounds relating to your particular situation (Art. 21 GDPR). You can also lodge a complaint with a data protection supervisory authority, in particular where you live, where you work or where the alleged infringement took place (Art. 77 GDPR).

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

8. Scope and status

This information applies to the website of Bonovation and Bonovation Lab at bonovation.de, in its English and German versions. It does not apply to the apps and other applications that can be reached under this domain; these have their own privacy information. The website does not use automated decision-making, including profiling. Last updated: 12 November 2026. If the website changes, this information will be updated accordingly.