Privacy Policy
As a specialist for components in the fields of toolmaking, precision mechanics, and mechanical engineering, the
highest precision is our daily standard. We apply this same standard to the protection of your personal data. In the
following privacy policy, we explain transparently how we collect, process, and protect personal data on our
website. We strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and the German
Federal Data Protection Act (BDSG) to ensure a secure user experience.
Controller
Controller for this website is:
Ottmar Buchberger GmbH
Obermichelbacher Straße 13
90587 Tuchenbach
Further information about our company and the persons authorized to represent it can be found in our legal notice.
What data is processed?
Legal basis for data processing
In order to offer you our website and the associated services, we process personal data on the basis of the following
legal grounds:
- Consent (Art. 6 para. 1 lit. a) GDPR)
- for the performance of a contract (Art. 6 para. 1 lit. b) GDPR)
- based on a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
- for compliance with a legal obligation (Art. 6 para. 1 lit. c) GDPR)
We will refer to the relevant terminology in connection with each processing activity so that you can understand the
basis on which we process personal data.
If your personal data is processed based on your consent, you have the right to withdraw your consent at any time
with effect for the future.
If we process data based on a balancing of interests, you, as the data subject, have the right to object to the
processing of your personal data in accordance with Article 21 of the GDPR.
Website Hosting
We host our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter “Hetzner”).
When you visit our website, your personal data is processed on Hetzner’s servers. This may include IP addresses,
contact requests, metadata and communication data, website access data, and other data generated via a website.
The use of Hetzner is based on Article 6 Paragraph 1 Letter f GDPR. We have a legitimate interest in the most
reliable, secure, and efficient provision of our online services by a professional provider. If corresponding
consent has been requested, processing is carried out exclusively on the basis of Article 6 Paragraph 1 Letter a
GDPR; this consent can be revoked at any time.
Hetzner automatically collects and stores information in so-called server log files, which your browser
automatically transmits to us. This information includes:
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) GDPR, as
we have a legitimate interest in the technically flawless presentation and optimization of our website – for this
purpose, the server log files must be recorded.
We have concluded a data processing agreement (DPA) with Hetzner. This is a legally required contract under data
protection law, which ensures that Hetzner processes the personal data of our website visitors only according to our
instructions and in compliance with the GDPR.
We exclusively use server locations of Hetzner Online GmbH within the European Union (Germany and Finland) to
guarantee the highest possible level of data protection and data security.
Further information can be found in Hetzner’s privacy policy at https://www.hetzner.com/de/rechtliches/datenschutz.
Explanations regarding the scope of possible data processing within the context of web hosting can be found at
www.hetzner.de/rechtliches/webhosting/
Cookies
Our websites use cookies. Cookies are small text files that are stored on your device via your browser. Cookies
are required to enable certain functions of our website.
We use the following cookies on our site:
borlabs-cookie
| Name | Storage duration | ||
| .buchberger-gmbh.de | _fbp | Used by Facebook to display a number of To deliver advertising products such as real-time bids from third-party providers | approx. 3 months |
| buchberger-gmbh.de | Used to store the user’s cookie consent so that no new consent needs to be obtained the next time the website is accessed. | approx. 2 months | |
| buchberger-gmbh.de | borlabs-cookie-gcs | approx. 2 months | |
| buchberger-gmbh.de | pll_language | This cookie name is associated with the Polylang plugin for WordPress websites. It stores a language preference for the visitor to support multilingual websites. If it is set as a persistent cookie or with a default lifespan of 1 year, it should be considered functional rather than strictly necessary. | approx. 12 months |
All of the aforementioned cookies are necessary for the operation of our website. The use of non-essential
cookies only occurs with your consent. In these cases, a corresponding consent form will be displayed to you on
the website.
You have the option to prevent cookies from being set by making appropriate settings in your browser. However, we
would like to point out that in this case, the use of our websites may be limited. Cookies do not install or
launch any programs or other applications on your computer.
The use of cookies is based on a balancing of interests. Our interest is to make visiting our websites as
user-friendly as possible.
Contact Form
We provide a contact form on our website through which you can request information about our products or services
or contact us in general. The data that you must provide to process a request is marked as mandatory fields.
Information in additional data fields is voluntary.
We need this information to process your request, address you correctly, and send you a response. For specific
requests, the data processing takes place for the performance of a contract or the initiation of a contract. For
general inquiries, the processing is based on a balancing of interests.
Requests received via the contact form on our website are processed electronically by us to answer your inquiry.
In this context, other persons or departments and possibly third parties may also become aware of the form
content you have submitted.
The transmission of form data over the Internet takes place via encrypted connections.
Contact Form for Applicants
We collect and process the personal data of applicants. This data processing may also take place electronically, for example if applicants send us application documents via e-mail or through a web form on our website.
Storage of your data in an applicant database beyond the current application process will only take place if you have given us your separate consent to do so.
The processing of your data in connection with your application is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship pursuant to Section 26 BDSG. In the event of the transfer of your application documents to third parties, in particular to affiliated companies, as well as the storage of your data beyond the current application process, the processing of your data takes place on the basis of Art. 6(1) Sentence 1 lit. a GDPR. There is no statutory or contractual obligation to provide your data, but processing your application is not possible without providing the information.
We store the collected data for a period of six months from the date the position is filled.
Presences on Social Media Platforms
We maintain so-called fan pages/accounts or channels on the networks listed below to provide you with information and offers within social networks and to offer you additional ways to contact us and learn about our offers. In the following, we inform you which data we or the respective social network process from you in connection with accessing and using our fan pages/accounts.
If you wish to contact us via Messenger or Direct Message through the respective social network, we generally process your username through which you contact us and, if necessary, store further data provided by you to the extent required to process/respond to your request.
The legal basis is Art. 6(1) Sentence 1 f) GDPR (processing is necessary for the purposes of the legitimate interests of the controller).
We receive statistics concerning our accounts automatically provided through Insights functions. The statistics include, among other things, the total number of page views, likes, information on page activities and post interactions, reach, video views/views, and information on the proportion of men/women among our fans/followers.
The statistics contain only aggregated data that cannot be attributed to individual persons. You are not identifiable to us through them.
To view the content of our fan pages/accounts, you do not need to be a member of the respective social network, and no user account for the respective social network is required in this respect.
Please note, however, that social networks also collect and store data from website visitors without a user account when accessing the respective social network (e.g. technical data to display the website to you) and use cookies and similar technologies, over which we have no influence. Details can be found in the privacy policies of the respective social network (see the corresponding links above).
If you wish to interact with the content on our fan pages/accounts, e.g. comment on, share, or like our posts/contributions and/or contact us via Messenger functions, prior registration with the respective social network and provision of personal data is required.
We have no influence on the data processing by the social networks in the context of your use. To our knowledge, your data is stored and processed in particular in connection with providing the services of the respective social network, and furthermore for analyzing usage behavior (using cookies, pixels/web beacons, and similar technologies), on the basis of which interest-based advertising is served both within and outside the respective social network. It cannot be ruled out that your data may also be stored by the social networks outside the EU/EEA and transferred to third parties.
Information on, among other things, the exact scope and purposes of processing your personal data, storage/deletion periods, as well as policies on the use of cookies and similar technologies in connection with registration and use of the social networks can be found in the privacy policies/cookie policies of the social networks. You will also find information there on your rights and objection options.
Facebook Page
When visiting our Facebook page, Facebook (Meta) collects, among other things, your IP address and other information present on your PC in the form of cookies. This information is used to provide us as the operator of the Facebook pages with statistical information about the use of the Facebook page. Facebook provides further information on this at the following link: https://facebook.com/help/pages/insights.
Using the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use them to address the interests of our users and to continuously improve our online presence and ensure its quality.
We collect your data via our fan page only to enable possible communication and interaction with us. This collection usually includes your name, message content, comment content, and profile information you have made “publicly” available.
The processing of your personal data for the aforementioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6(1) f) GDPR. If you as a user have given consent to data processing to the respective social network provider, the legal basis for processing extends to Art. 6(1) a), Art. 7 GDPR.
Since the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, deletion request, objection, etc.). Asserting corresponding rights is therefore most effective directly against the respective provider.
We are jointly responsible with Facebook for the personal data content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us.
Pursuant to GDPR, the primary responsibility for processing Insights data lies with Facebook, and Facebook fulfills all GDPR obligations with regard to processing Insights data. Meta Platforms Ireland Ltd. provides the essential page insights supplement to data subjects.
We do not make decisions regarding the processing of Insights data and the storage duration of cookies on user devices.
Further information can be found directly at Facebook (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.
Detailed information regarding the exact scope and purposes of processing your personal data, storage/deletion periods, as well as policies on the use of cookies and similar technologies in connection with registration and use can be found in Facebook’s privacy policy/cookie policy:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies
Instagram Page
When visiting our Instagram page, Instagram collects, among other things, your IP address and other information present on your PC in the form of cookies. This information is used to provide us as the operator of the Instagram pages with statistical information about the use of the Instagram page. Instagram provides further information on this at the following link: https://facebook.com/help/pages/insights.
Using the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use them to address the interests of our users and to continuously improve our online presence and ensure its quality.
We collect your data via our fan page only to enable possible communication and interaction with us. This collection usually includes your name, message content, comment content, and profile information you have made “publicly” available.
The processing of your personal data for the aforementioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6(1) f) GDPR. If you as a user have given consent to data processing to the respective social network provider, the legal basis for processing extends to Art. 6(1) a), Art. 7 GDPR.
Since the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, deletion request, objection, etc.). Asserting corresponding rights is therefore most effective directly against the respective provider.
We are jointly responsible with Instagram for the personal data content of the fan page. Data subject rights can be asserted with Facebook Ireland as well as with us.
Pursuant to GDPR, the primary responsibility for processing Insights data lies with Instagram, and Instagram fulfills all GDPR obligations with regard to processing Insights data. Facebook Ireland provides the essential page insights supplement to data subjects.
We do not make decisions regarding the processing of Insights data and all other information arising from Art. 13 GDPR, including legal basis, identity of the controller, and storage duration of cookies on user devices.
Further information can be found directly at Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.
LinkedIn Page
LinkedIn is a social network of LinkedIn Inc., based in Sunnyvale, California, USA, which enables the creation of private and professional profiles of natural persons and company profiles. Users can maintain existing contacts and establish new ones within the social network. Companies and other organizations can create profiles on which photos and other company information can be uploaded to present themselves as employers and recruit employees. Other LinkedIn users have access to this information and can write their own articles and share this content with others. The focus of the network is on professional exchange on specialist topics with people who have the same professional interests.
When using or visiting the network, LinkedIn automatically collects data from users/visitors during use or visit, such as username, job title, and IP address. This is done using various tracking technologies. LinkedIn provides benefits, including information, offers, and recommendations, based on the data collected in this way.
We collect your data via our company profile only to enable possible communication and interaction with us. This collection usually includes your name, message content, comment content, and profile information you have made “publicly” available.
The processing of your personal data for the aforementioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6(1) f GDPR. If you as a user have given consent to data processing to the respective social network provider, the legal basis for processing extends to Art. 6(1) a, Art. 7 GDPR.
Since the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorized to have full access to your data. Therefore, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, deletion request, objection, etc.). Asserting corresponding rights is therefore most effective directly against the respective provider.
We are jointly responsible with LinkedIn for the personal data content of our company profile. Data subject rights can be asserted with LinkedIn Inc. as well as with us.
We do not make decisions regarding the data collected on the LinkedIn page using tracking technologies.
Further information about LinkedIn can be found at: https://about.linkedin.com.
Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy.
Further information on storage/deletion periods as well as policies on the use of cookies and similar technologies in connection with registration and use at LinkedIn can be found at: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy.
Facebook Pixel
We use Meta Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offering, determine conversion rates, and subsequently optimize them. This occurs in particular when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.
The use of Meta Pixel is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place pursuant to Art. 45(1) GDPR on the basis of the European Commission’s adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision from the European Commission exists (including US companies that are not certified under EU-U.S. DPF), we have agreed other appropriate safeguards with the data recipients within the meaning of Art. 44 et seq. GDPR. These are – unless otherwise stated – standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, we obtain your consent for such third-country transfers pursuant to Art. 49(1) Sentence 1 lit. a GDPR, which you grant via the consent in the Consent Manager (or other forms, registrations, etc.). We point out that third-country transfers may involve unknown risks in detail (e.g. data processing by the third country’s security authorities, the exact scope and consequences of which for you we do not know, have no influence over, and of which you may not become aware).
The specific storage duration of the processed data is not determined by us but by Meta Platforms Ireland Limited. Further information can be found in the privacy policy for Meta Pixel: https://www.facebook.com/privacy/explanation.
YouTube (with extended data protection mode)
We embed videos from the “YouTube” platform on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA).
We use YouTube in extended data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. However, as soon as you start playing a YouTube video, a connection to YouTube’s servers is established. The YouTube server is then informed which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly assign your browsing behavior to your personal profile. You can prevent this by logging out of your YouTube account.
Due to the embedding of YouTube, it may technically result in calls to servers of Google LLC in the USA. Google is certified under the “EU-U.S. Data Privacy Framework.” This constitutes an adequacy decision by the European Commission certifying Google an adequate level of data protection.
The use of YouTube serves the interest of an appealing and professional presentation of our technical solutions and components (legitimate interest pursuant to Art. 6(1)(f) GDPR). If corresponding consent has been obtained (e.g. via our cookie consent banner), the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; the consent can be revoked at any time.
Further information on the handling of user data can be found in Google’s privacy policy at: https://policies.google.com/privacy?hl=de
Google APIs
We use Google APIs from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA) on our website. These are programming interfaces that enable us to retrieve additional functions and libraries from Google servers. When these interfaces are called, a connection to Google’s servers is technically established, and your IP address is transmitted to Google. This serves to ensure fast and error-free provision of our website.
Google Maps
We use the “Google Maps” map service on our website to show you the location of our company and enable comfortable route planning.
For the map content to be displayed, Google must process your IP address, as otherwise the content could not be sent to your browser. Additionally, Google may collect further information such as location data if you have permitted this in your browser settings or mobile devices.
The use of Google Maps is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. The map is usually activated only after you have given your consent via our cookie consent banner or by explicitly clicking on the map preview.
Purposes of Processing Personal Data
We process the aforementioned data for the operation of our website and to fulfill contractual obligations towards our customers or to safeguard our legitimate interests.
For inquiries from you outside an active customer relationship, we process the data for sales and advertising purposes. You can object to the use of your personal data for advertising purposes at any time.
Voluntary Information
To the extent that you provide us with data voluntarily, e.g. in forms, and this data is not required for the fulfillment of our contractual obligations, we process this data on the legitimate assumption that the processing and use of this data is in your interest.
Recipients / Data Transfer
Data that you provide to us will generally not be passed on to third parties. In particular, your data will not be passed on to third parties for their advertising purposes.
However, we may use service providers for the operation of these websites or for other products or services of ours. In this case, a service provider may become aware of personal data. We carefully select our service providers – particularly with regard to data protection and data security – and take all data protection measures required for permissible data processing.
Data Processing Outside the European Union
To the extent that personal data is processed outside the European Union, this can be seen from the previous explanations.
Data Protection Officer
We have appointed a data protection officer.
You can contact them as follows:
Qualitybase GmbH
– Data Protection Officer –
Weinleite 14
92348 Berg
E-Mail: ottmar-buchberger-datenschutz@qualitybase.de
Your Rights as Data Subject
You have the right to information about the personal data concerning you. You can contact us at any time for information.
For information requests not made in writing, we ask for your understanding if we require proof from you that you are the person you claim to be.
You also have the right to rectification or erasure or to restriction of processing, insofar as you are entitled to do so by law.
Finally, you have a right to object to processing within the framework of legal provisions.
A right to data portability also exists within the framework of data protection regulations.
Deletion of Data
We generally delete personal data when there is no longer any need for further storage. A need may exist in particular if the data is still required to fulfill contractual services, to check, grant or defend warranty and possibly guarantee claims. In the case of statutory retention periods, deletion will only take place after the respective retention period has expired.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to complain to a supervisory authority for data protection about our processing of personal data.
Changes to These Privacy Notices
We revise these privacy notices in case of changes to this website or other circumstances that make this necessary. You will always find the current version on this website.
Date: 01.02.2026