Data Protection Policy

Protecting Your Personal Data

At Bio-Kontroll Institut GmbH, we are committed to protecting your personal data and respecting your privacy.
As a Germany-based quality control organization, we process personal information in accordance with the European Union General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all applicable data protection laws.This policy explains how we collect, use, store, and protect your personal data when you interact with our website, services, inspections, audits, certifications, and business operations.

Data Controller
Bio-Kontroll Institut GmbH
Schlossstraße 16/2 74592 Kirchberg/Jagst Germany

Email: info@biokontroll-institut.org
Phone: +49 (0) 7954 921 555 0
For any questions regarding data protection or the processing of your personal data, please contact us using the details above.

Information We Collect
We may collect and process the following categories of personal information:

• Name and contact details
• Company and job-related information
• Email addresses and telephone numbers
• Correspondence and communication records
• Website usage information and analytics data
• Information required for audits, inspections, testing, certification, and compliance services
• Contractual and billing information
We collect only the information necessary to provide our services and fulfill legal or contractual obligations.

Purpose of Data Processing
We process personal data for the following purposes:
• Providing quality control, inspection, testing, and certification services
• Managing client relationships and communications
• Responding to enquiries and service requests
• Fulfilling contractual obligations
• Improving our services and website performance
• Meeting legal, regulatory, and compliance requirements
• Protecting our systems, personnel, and business operations

Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests
• Consent where required
• Protection of vital interests

Data Sharing
We do not sell personal data to third parties.
Information may be shared with:
• Authorized employees and service providers
• Accredited partners, laboratories, and subcontractors involved in service delivery
• Regulatory authorities where required by law
• Legal advisors, auditors, and compliance professionals
All third parties are required to maintain appropriate confidentiality and security standards.

International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented in accordance with GDPR requirements, including approved contractual mechanisms and adequate protection measures.

Data Retention
Personal data is retained only for as long as necessary to:

• Deliver our services
• Fulfill contractual obligations
• Meet legal and regulatory requirements
• Resolve disputes and enforce agreements
Once data is no longer required, it is securely deleted or anonymized.

Your Rights
Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict processing
• Object to certain processing activities
• Request data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority
To exercise your rights, please contact us using the details provided above.

Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
Our security practices include:
• Secure data storage
• Access controls
• Encryption where appropriate
• Staff confidentiality obligations
• Regular security assessments

Cookies and Website Analytics
Our website may use cookies and analytics technologies to improve user experience, monitor website performance, and understand visitor interactions.
Users can manage cookie preferences through their browser settings.
For further information, please refer to our Cookie Policy.

Changes to This Policy
We may update this Data Protection Policy periodically to reflect changes in legal requirements, business operations, or technology.
The latest version will always be available on our website.

Contact Us
If you have any questions regarding this Data Protection Policy or the processing of your personal data, please contact:

Bio-Kontroll Institut GmbH
Schlossstraße 16/2 74592 Kirchberg/Jagst Germany
Email: info@biokontroll-institut.org
Phone: +49 (0) 7954 921 555 0