Data Privacy Statement

Data usage when visiting the website

The website of B+L Marktdaten GmbH can be visited without visitors having to provide personal information. As part of establishing and maintaining the internet connection, the following data is stored: time of page retrieval, IP address, operating system, browser type, amount of data transferred, retrieved domain and, where the website is accessed via a link, the origin as well.

Contact form

The data you send us via the contact form is used only for contact purposes. We do not pass this data on without your consent. You can request the deletion of your data at any time by e-mail to datenschutz@bldata.de.

Newsletter

To sign up for the newsletter we need your e-mail address and your first and last name. Any further information is voluntary. The data provided is used exclusively for sending the newsletter and is not passed on to third parties. You can revoke your consent at any time.

Cookies

The website of B+L Marktdaten GmbH uses cookies. These serve to make our offering more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored in your browser. Session cookies are deleted automatically at the end of the session. Persistent cookies remain until they are deleted manually.

Use and disclosure of personal data

Where the user of our website has provided personal data, we use it only to respond to inquiries and to process concluded contracts. Personal data is passed on to third parties only where this is necessary for the performance of a contract, for billing, or with the user’s express consent.

SalesViewer® technology

On this website, data is collected and stored for marketing, market research and optimisation purposes using SalesViewer® technology. The legal basis is Art. 6(1)(f) GDPR. A one-way hash of the data is created; it is not possible to draw conclusions about individual persons.

Use of the GBM API (gbmapi.bl2020.com)

When you use our application programming interface (API), we process technical access data with every call. The following data is processed:

• IP address, user agent and – where transmitted – the Origin/Referer header of the calling system,
• time of the call,
• the API key used (and the associated user or company account),
• the content requested

Purposes: Provision and technical operation of the API, billing for usage, ensuring IT security, and detecting and preventing misuse – in particular the unauthorised disclosure of API keys to third parties – and enforcing our Terms of Use.

Legal basis: Processing for the purposes of provision and billing is carried out on the basis of Article 6(1)(b) of the GDPR (performance of a contract). The processing of IP addresses, user-agent strings and origin for security and misuse detection purposes is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in securing the service and preventing use that contravenes the terms of the contract.

Retention period: This access data is stored for up to two years and is then automatically deleted.

Recipients: No data is disclosed to third parties.

You are entitled to the data subject rights set out in this privacy policy, in particular the right to object under Article 21 of the GDPR to processing based on Article 6(1)(f) of the GDPR.

Right to information

Upon written request, we will inform the user about the data stored concerning them.