Privacy notice.

1. Controller

The controller responsible for processing personal data on this website is bikosigma GmbH, August-Borsig-Straße 20, 59439 Holzwickede, Germany, phone +49 (2301) 96 97 5 - 10, email zentrale@bikosigma.de, represented by its managing director Holger Kligge.

2. Data protection officer

You can reach our data protection officer at datenschutz@bikosigma.de or at our postal address marked “Data protection officer”.

3. General information

We process personal data only to the extent necessary to provide this website, its content and our services. Legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest). We state the relevant legal basis for each processing activity.

We delete personal data as soon as the purpose of storage no longer applies and no statutory retention obligations apply, in particular under commercial and tax law (up to ten years).

Where necessary, recipients of your data are carefully selected service providers acting on our instructions as processors under Art. 28 GDPR, for example for hosting, email delivery and IT operations. Data is only transferred to countries outside the European Economic Area where an adequacy decision of the European Commission or appropriate safeguards under Art. 46 GDPR exist. We point this out for the individual services.

4. Hosting and server log files

This website is hosted by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft Azure data centre, region Germany West Central, Frankfurt am Main). A data processing agreement is in place with the host. When you access the website, technically necessary data is processed: IP address, date and time, page accessed, referrer URL, amount of data transferred, browser type and version, and operating system. This is necessary to deliver and securely operate the website. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after seven days at the latest unless needed to investigate a security incident.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.

6. Cookies and consent management

We use technically necessary cookies and similar technologies on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. All other cookies and services, in particular for audience measurement and embedded maps, are only used with your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. We manage your consent with a consent tool [placeholder: provider]. You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the footer.

7. Fonts

Fonts are loaded exclusively from our own server. No connection to third-party servers such as Google Fonts is established.

8. Contacting us

If you contact us by email, phone, contact form or the proposal assistant, we process your details to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling enquiries. Mandatory fields are marked. We delete the data once the enquiry has been fully handled and no statutory retention obligations apply.

9. Newsletter

We send our newsletter via Brevo, a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, acting as our processor. Sign-up uses a double opt-in procedure; we log sign-up, confirmation and IP address as proof of your consent. The legal basis is Art. 6(1)(a) GDPR. We evaluate whether a newsletter was opened and which links were clicked in order to improve our offering; this is also covered by your consent. You can unsubscribe at any time via the link in every email. After unsubscribing we delete your data from the mailing list; your email address may be kept on a block list to prevent further mailings (Art. 6(1)(f) GDPR).

10. Audience measurement

With your consent, we use [placeholder: analytics service and provider] to evaluate the use of this website statistically. This involves processing [placeholder: data processed, e.g. truncated IP address, pages viewed, time on page]. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings.

11. Maps

On the contact page we embed a map from [placeholder: provider, e.g. OpenStreetMap or Google Maps]. The map is only loaded once you agree. Your IP address is transmitted to the provider. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. [Placeholder: for Google Maps, add reference to Google Ireland Limited, transfer to the USA and certification under the EU-US Data Privacy Framework.]

12. Videos

The client testimonial videos on this website are [placeholder: delivered from our own server / embedded via provider X]. When delivered from our own server, no data is transferred to third parties.

13. Social media

We are present on LinkedIn and Instagram. On this website we only use simple links, no plugins. Data is only transmitted to the respective provider when you click a link and open their page. Processing on these platforms is governed by the privacy notices of LinkedIn (LinkedIn Ireland Unlimited Company) and Instagram (Meta Platforms Ireland Limited). For our company pages on these platforms we are jointly responsible with the respective provider (Art. 26 GDPR).

14. Platforms and client portal

The biport and bikonnect platforms and the client portal are operated under their own addresses, where separate privacy notices apply. Data you process in the client portal is processed by us to perform our contracts under Art. 6(1)(b) GDPR.

15. Applications

We handle job postings and applications via the JOIN platform of JOIN Solutions AG, Zurich, Switzerland. An adequacy decision of the European Commission exists for Switzerland. We process your application data to carry out the application procedure under Art. 6(1)(b) GDPR. If no employment relationship results, we delete your data no later than six months after the procedure ends unless you have agreed to longer storage.

16. Your rights

Subject to the statutory provisions, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to withdraw consent at any time with effect for the future (Art. 7(3)). Please contact zentrale@bikosigma.de or our data protection officer.

17. Right to object under Art. 21 GDPR

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons.

18. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

19. Further information

Providing your data is neither a statutory nor a contractual requirement. Without the information in the mandatory fields, however, we cannot process your enquiry. No automated decision-making including profiling under Art. 22 GDPR takes place.

As of: October 2026. In case of doubt, the German version of this privacy policy prevails.

To be completed and reviewed before publication: host, consent tool, analytics service, map provider and video delivery (placeholders in sections 4, 6, 10, 11 and 12). Check whether a data protection officer has been appointed. A final legal review is recommended.