Privacy policy

1. Privacy at a Glance

General Information

The protection of your personal data is very important to us. The following information provides an overview of what happens to your personal data when you visit our website.

Personal data refers to any information relating to an identified or identifiable natural person.

Detailed information on the processing of your personal data can be found in the following sections of this Privacy Policy.

Data Collection on This Website

Who is responsible for data processing?

Data processing on this website is carried out by the website operator:

Bendforce GmbH
Kleine Häg 6
29313 Hambühren
Germany

Represented by the managing director:
Jonathan Hagos

Phone: +49 5084 9609980
Email: info@bendforce.com

How do we collect your data?

First, data is collected when you provide it to us. This applies in particular to information you submit to us via our contact form or by email.

Additionally, when you visit our website, technical data is automatically collected by our IT systems or our hosting provider. This may include, in particular, your IP address, browser type, operating system, the time you accessed the page, and other technical access data.

How do we use your data?

We process personal data in particular:

  • to ensure the technically sound and secure operation of our website,
  • to process your inquiries,
  • to communicate with customers, prospective customers, and business partners,
  • to carry out pre-contractual measures and to manage existing business relationships,
  • to prevent and investigate misuse or attacks on our IT systems.

To the best of our current knowledge, no automated decision-making, including profiling, takes place via this website.

2. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Bendforce GmbH
Kleine Häg 6
29313 Hambühren
Germany

Represented by the managing director:
Jonathan Hagos
Phone: +49 5084 9609980
Email: info@bendforce.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. Legal Basis for Data Processing

We process personal data only to the extent that there is a legal basis for doing so.

Depending on the type of processing, the following legal bases are particularly relevant:

Art. 6(1)(a) of the GDPR
if you have given us your consent to process your personal data.

Art. 6(1)(b) GDPR
if the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.

Article 6(1)(c) of the GDPR
if the processing is necessary to comply with a legal obligation.

Art. 6(1)(f) GDPR
if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, and your interests, fundamental rights, and fundamental freedoms do not override those interests.

4. Hosting

This website is hosted by the following provider:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you visit our website, personal data is processed on the hosting provider’s servers. In particular, this may include IP addresses, technical access data, communication data, and other data generated when a website is accessed.

The use of the hosting provider is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is provided in a reliable, secure, and technically sound manner.
To the extent that STRATO processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR.

5. Server Log Files

When you visit our website, the hosting provider automatically processes information in so-called server log files.
This may include, in particular, the following data:

  • IP address of the accessing device,
  • Date and time of access,
  • Page or file accessed,
  • browser type and version,
  • operating system used,
  • referrer URL,
  • Hostname of the accessing device,
  • Amount of data transferred,
  • HTTP status code.

This data is processed to ensure that the website displays and functions properly from a technical standpoint and to guarantee the security of our information technology systems.

The legal basis for this is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and error-free provision of our website.
This data is generally not combined with other data sources unless there is a corresponding legal basis for doing so.

6. Contacting Us and the Contact Form

Our website offers the option to contact us via a contact form.

If you send us an inquiry via the contact form, we process the data you enter as well as the contact information you provide to handle your inquiry and for any follow-up questions.

In particular, the following data may be processed:

  • Name,
  • Company,
  • Email address,
  • phone number,
  • Content of your message,
  • any additional information you voluntarily provide.

If your inquiry relates to the initiation or performance of a contract, processing is based on Article 6(1)(b) of the GDPR.

For other inquiries, processing is based on our legitimate interest in efficiently handling and responding to inquiries in accordance with Article 6(1)(f) of the GDPR.

To the extent that you have expressly consented to a specific processing activity, the processing is additionally or alternatively based on Article 6(1)(a) of the GDPR.

The data you provide will be deleted as soon as the purpose of the processing no longer applies and there are no legal retention obligations or other legitimate reasons for further storage.

7. Contacting Us by Email or Phone

If you contact us via email or phone, we process your inquiry, including any personal data contained therein, for the purpose of handling your request.
If your inquiry serves to initiate or fulfill a contract, the processing is carried out in accordance with Article 6(1)(b) of the GDPR.

In other cases, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper and efficient handling of inquiries directed to us.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and may contain certain information.

We use cookies that are necessary for the technically sound and secure operation of our website, as well as for providing the features you request. These technically necessary cookies may, in particular, serve to ensure basic website functions, manage security settings, or save settings you have configured while using the website.

To the extent that storing information on your device or accessing information already stored is absolutely necessary for the provision of a digital service you have expressly requested, no prior consent is required. The subsequent processing of personal data is based—where applicable—on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and technically sound provision of our website.

To the extent that we also use cookies or similar technologies that are not technically necessary—in particular for analytical, statistical, marketing, or tracking purposes—their use is based solely on your prior consent, provided that such consent is required by law. Consent that has been given may be revoked at any time with future effect.

Google Analytics 4

If you have given your consent, we use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics enables us to analyze the use of our website and, based on this, to optimize our online offering. To this end, we may process, in particular, information about page views, interactions with our website, technical information about your browser and device, your approximate geographic location, and other usage data.

When using Google Analytics, the following cookies, in particular, may be stored on your device:

  • _ga: used primarily to distinguish and recognize users;
  • _ga_EZ51CRWY46: used primarily to store and evaluate session and usage information for the Google Analytics property we use.

Google Analytics is only activated after you have given your consent to the relevant analytics and statistics cookies via our consent management system.

The storage of information on your device or access to information already stored is based on your consent in accordance with Section 25(1) of the TDDDG. To the extent that personal data is processed in connection with the use of Google Analytics, such processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.

Recipients of the data processed in connection with Google Analytics may include, in particular, Google Ireland Limited as well as Google’s affiliated companies and service providers. It cannot be ruled out that personal data may also be transferred to Google LLC or other Google companies in the United States of America and processed there.

For data transfers to the U.S., Google may rely on the European Commission’s adequacy decision regarding the EU-U.S. Data Privacy Framework (DPF), provided that the respective recipient is certified accordingly. If a data transfer cannot be made on the basis of an adequacy decision, the Standard Contractual Clauses approved by the European Commission, in particular, may be used as appropriate safeguards for the transfer of personal data to third countries.

You may revoke or modify your consent at any time with future effect using the consent management settings provided on our website. The lawfulness of the processing carried out on the basis of your consent up until its revocation remains unaffected by this.

For more information on Google’s processing of personal data and on Google Analytics, please refer to Google’s privacy policy.

Retention Period and Browser Settings

The retention period for the cookies used depends on their respective purpose. Some cookies are automatically deleted at the end of the browser session (session cookies), while others remain stored on your device for a specific period of time.

You can also configure your browser to notify you when cookies are set, to allow cookies only in certain cases, or to reject cookies altogether. Please note that disabling technically necessary cookies may limit the functionality of our website.

9. Links to Social Networks

Our website contains links to our company profiles on external social networks or platforms.

These include, in particular:

  • LinkedIn,
  • Instagram,
  • YouTube.

To the best of our current knowledge, these are simply links. Therefore, simply visiting our website does not, in principle, result in any personal data being transmitted to the respective platform operators via these links.

Only when you click on a link do you leave our website and establish a direct connection to the respective platform. From that point on, the respective provider may process personal data.

The respective platform providers’ own privacy policies apply to the processing of personal data on their websites.

Please note that some of these providers are based outside the European Union or the European Economic Area, or may also process personal data in third countries.

10. SSL/TLS Encryption

This website uses TLS encryption for security reasons and to protect the transmission of confidential content.

You can recognize an encrypted connection in particular by the fact that the address bar of your browser begins with “https://.”

Encryption prevents data that you transmit to us from being easily read by unauthorized third parties during transmission.

11. Retention Period

Unless a more specific retention period is stated in this Privacy Policy, we store personal data only for as long as is necessary for the respective processing purpose.

If you submit a valid request for deletion or revoke your consent, the relevant personal data will be deleted, provided there are no other legal or legally permissible grounds for its continued storage.

Statutory retention and documentation obligations remain unaffected by this.

12. Recipients of Personal Data

In the course of our business activities, we may engage external service providers.

Personal data will only be transferred to external parties if:

  • it is necessary to fulfill a contract,
  • there is a legal obligation to do so,
  • we have a legitimate interest in the transfer,
  • you have consented to the transfer, or
  • another legal basis permits the transfer.

To the extent that external service providers process personal data on our behalf, we enter into data processing agreements in accordance with Article 28 of the GDPR, as required.

13. Your Rights

As a data subject, you are entitled to the following rights in particular, subject to the statutory requirements:

Right of Access
Pursuant to Article 15 of the GDPR, you have the right to request information regarding whether and what personal data we process about you.

Right to Rectification
Pursuant to Article 16 of the GDPR, you have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data.

Right to erasure
Subject to the conditions set forth in Article 17 of the GDPR, you have the right to request the erasure of your personal data.

Right to restriction of processing
Subject to the conditions set forth in Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data.

Right to data portability
Subject to the conditions set forth in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller.

Right to Withdraw Consent
If the processing is based on your consent pursuant to Article 6(1)(a) of the GDPR, you may withdraw your consent at any time with future effect.
The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

14. Right to Object under Article 21 of the GDPR

If we process personal data on the basis of Article 6(1)(e) or (f) of the GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

We will then no longer process the personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing of your personal data for the purpose of such marketing.

15. Right to File a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right, pursuant to Article 77 of the GDPR, to lodge a complaint with a data protection supervisory authority.

For companies based in Lower Saxony, the following supervisory authority is specifically responsible:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hanover
Germany

Regardless of this, you may also contact any other data protection supervisory authority competent under Article 77 of the GDPR.

16. No Automated Decision-Making

To the best of our current knowledge, no decision-making based solely on automated processing—including profiling as defined in Article 22 of the GDPR—takes place in connection with this website.

17. Security of Data Processing

We take appropriate technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and other threats.

Our security measures are reviewed and adapted in line with technological developments and in accordance with legal requirements.

18. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, our website, the services we use, or the manner in which data is processed change.

The current version published on this website applies.
As of: September 2026