Privacy Policy

1. Data Controller Identification

Brightsvaultbundle Engineering Media GmbH (registered with the Local Court of Stuttgart under HRB 98421) operates brightsvaultbundle.pics and acts as the Data Controller in accordance with Article 4(7) of the General Data Protection Regulation (GDPR). Our registered business address is Lichttechnisches Forum 14, 70178 Stuttgart, Germany. Inquiries concerning privacy management may be submitted to [email protected].

2. Scope and Nature of Processed Data

We process personal data only when strictly necessary to ensure technical stability, site security, and clear business communication:

• Server Log Data: When visiting this platform, web servers automatically store log files including your IP address (anonymized after 7 days), browser user-agent, operating system, referring URL, and access timestamps. The legal ground is Art. 6(1)(f) GDPR (legitimate interest in network security and error diagnosis).
• Direct Communication Records: When you complete the contact form or email our editorial desk, we process your submitted name, corporate email address, and message contents under Art. 6(1)(b) GDPR (pre-contractual communication or fulfilling your direct request).

3. Cookies and Tracking Mechanisms

We use essential cookies to maintain site security and remember your cookie preferences. Performance analytics cookies are deployed only if you provide consent via our consent banner. Detailed descriptions, lifespans, and opt-out procedures can be reviewed in our dedicated Cookie Policy.

4. Third-Party Processors and Data Routing

We run our website infrastructure on dedicated server nodes located strictly within the European Union (Frankfurt/Main, Germany). We do not sell, rent, or trade personal data to advertising networks. Subprocessors engaged for system infrastructure and security audits are bound by comprehensive Data Processing Agreements (DPAs) meeting Art. 28 GDPR standards.

5. Retention Periods and Erasure

Server access log entries are routinely deleted or fully anonymized after a 14-day retention cycle. Direct correspondence originating from contact inquiries is preserved for up to six months following ticket resolution, unless commercial or tax law retention obligations (such as German HGB/AO provisions) mandate longer preservation.

6. Your Legal Rights Under GDPR and CCPA

Under Chapter III of the GDPR and relevant California Consumer Privacy Act provisions, you are entitled to several protections:

• Right of Access (Art. 15 GDPR): The right to request confirmation and copies of personal data held about you.
• Right to Rectification (Art. 16 GDPR): The right to correct inaccurate or incomplete records.
• Right to Erasure (Art. 17 GDPR): The right to request deletion of your data where statutory retention exceptions do not apply.
• Right to Restriction and Objection (Art. 18 & 21 GDPR): The right to limit or object to specific processing workflows based on legitimate interests.
• Right to Data Portability (Art. 20 GDPR): The right to receive provided data in a structured, machine-readable format.

To exercise these rights, submit your signed request to our Data Protection Officer at [email protected]. You also have the right to lodge a formal complaint with the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI Baden-Württemberg).

7. Data Protection Officer Contact

Data Protection Officer • Brightsvaultbundle Engineering Media GmbH
Lichttechnisches Forum 14, 70178 Stuttgart, Germany
Email: [email protected]