Duty to provide information when collecting personal data from the data subject


Name and address of the person responsible

The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:

BEX Components AG
Garden road 97
73430 Aalen
Phone: +49 7361 99739-10
E-Mail: info(at)bex.ag

Name and address of the data protection officer

The data protection officer of the controller is:
Jürgen Ehmann
Keuperweg 12/4
70839 Gerlingen
Website: www.secbw.de
E-mail: data protection officer(at)bex.ag

Purposes and legal basis of data processing

The purpose of the data processing includes the provision of one or more products and/or development, support and consulting services in connection with them.

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (DSGVO) as the legal basis.

In the case of processing of personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6(6) of the Data Protection Act shall apply. 1 lit. b DSGVO as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c DSGVO as the legal basis.

In the event that vital interests of the data subject or of another natural person make it necessary to process personal data, Article 6(2) of the Data Protection Act shall apply. 1 lit. d DSGVO as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, then Art. 6 para. 1 lit. f DSGVO as the legal basis for the processing.

Data deletion and storage period

Personal data is removed in regular deletion runs once a service or project has been fully completed. Longer storage only takes place if there are storage obligations or if there is another legal basis.

Right of access, rectification, erasure, restriction of processing

You have the right to information, correction, deletion or restriction of processing and the right to data portability of your personal data.

Right of objection

You have the right to revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

Right to complain to a supervisory authority

You have the right to lodge a complaint with a supervisory authority in your country if you consider that the processing of personal data concerning you infringes the GDPR.

Transfer of your data to third countries or international organisations

Infopackets and newsletters are sent by ActiveCampaign, a newsletter delivery platform located at 1 N Dearborn, 5th Floor, Chicago, IL 60601, United States.

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc.,1600 Amphitheatre Parkway Mountain View, CA 94043, USA.


Automated decision making including profiling

No fully automated decision-making (including profiling) is used for the processing of the data provided by you in accordance with the German Data Protection Act. Art. 22 DS-GVO is used.