Data Protection Declaration

At bpExperts GmbH, we believe the protection of personal data involves far more than just complying with legislation. We process personal data such as name, address, e-mail address or phone number in accordance with applicable privacy law, and explain below the nature, scope and purpose of the data we collect, use and process — and the rights you have.

Entity responsible

bpExperts GmbH
Dr. Jochen König, Markus Wolf, Dr. Russell Gomersall
Frankfurter Straße 39 / Stadthof 16 A, 63065 Offenbach am Main, Germany
Tel: +49 172 7210876 · info@bpexperts.de

Privacy Officer

DDI – Deutsches Datenschutz Institut GmbH (deutsches-datenschutz-institut.de). Contact our Privacy Officer at data-privacy@bpexperts.de.

Hosting & delivery (server log files)

This website is hosted on Railway (EU region) and delivered via Cloudflare; static assets are stored on Cloudflare R2. When you visit, your browser transmits data to our server (“server log files” — e.g. IP address, time, requested resource), processed under Art. 6(1)(f) GDPR on the basis of our legitimate interest in the stability, security and functionality of the site. We reserve the right to review log files if there are grounds to suspect unlawful use.

Contact form

When you contact us via the contact form or by e-mail, we collect the data you provide (name, e-mail, company, message) and store it to answer your enquiry and for the associated administration (Art. 6(1)(f), and Art. 6(1)(b) where the contact concerns a contract). The submission may be forwarded to a processor that delivers it to us (e.g. an email/ workflow service). Your data is erased once the enquiry is conclusively resolved and no statutory retention period applies.

AI chat assistant

Our website includes an AI chat assistant. The messages you enter are processed to generate responses and are transmitted to our chat backend and to an AI provider (Anthropic). Please do not enter sensitive personal data into the chat. Processing is based on our legitimate interest in offering an interactive support channel (Art. 6(1)(f)).

Embedded video (YouTube / Vimeo)

Some articles embed videos. YouTube is embedded in privacy-enhanced mode (youtube-nocookie.com); when you play a video, data may be transmitted to the respective provider (Google Ireland / YouTube, Vimeo). We have no influence over this processing.

Recipients & service providers

We use carefully selected service providers (processors) to operate the site — in particular for hosting, content delivery, asset storage and the AI chat assistant. These act on our instructions under data processing agreements. We do not sell your data.

International transfers

Some of the providers above are based outside the EU/EEA or may process data there. Where that is the case, transfers are safeguarded by appropriate measures such as the EU Standard Contractual Clauses and/or adequacy mechanisms. Details are available from our Privacy Officer on request.

Retention & deletion

We store personal data only for as long as necessary for the purpose for which it was collected, or as required by statutory retention periods. Once the purpose ceases and no retention obligation applies, the data is restricted from processing or deleted.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and — where processing is based on consent — to withdraw that consent at any time with effect for the future.

Right to complain

If you believe the processing of your personal data infringes the GDPR (Art. 77), you may lodge a complaint with our Privacy Officer or with a supervisory authority. The authority with jurisdiction over us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

Profiling

Automated profiling and scoring do not take place.

Last updated: June 2026.