Privacy Policy
Last updated: September 2026
1. Data Controller
The controller responsible for data processing on this website pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR / DSGVO) is:
BevCon Beverage Consulting GmbH
Kleine Johannisstraße 10
20457 Hamburg · Germany
Managing Director: Johannes Bier
Phone: +49 152 5359 6946
Email: bier@bevcon.net
2. General Principles & Legal Bases
We collect and process personal data only to the extent necessary to provide a functional and user-friendly website as well as our engineering consulting services. Personal data is treated confidentially and in strict compliance with statutory data protection regulations.
- Consent (Art. 6(1)(a) GDPR & TDDDG § 25(1)): Where you have granted consent for specific operations (e.g. non-essential cookies, web analytics).
- Contractual & Pre-contractual Measures (Art. 6(1)(b) GDPR): For processing inquiries, project scoping, contract negotiation (FIDIC, EPC/EPCM), and project submission forms.
- Legitimate Interests (Art. 6(1)(f) GDPR): For maintaining website integrity, technical stability, and defending against cyber threats.
3. Hosting & Server Log Files
Our website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit our website, Vercel automatically records technical information in server log files, including:
- Browser type and version
- Operating system used
- Referrer URL (previously visited page)
- Host name of the accessing device (IP address, stored in anonymized format)
- Date and time of server request
This data is not combined with other data sources. Processing is based on Art. 6(1)(f) GDPR to ensure the secure and flawless delivery of our website. A Data Processing Agreement (DPA) including EU Standard Contractual Clauses has been concluded with Vercel.
4. Cookies and Consent Management (TDDDG § 25)
This website utilizes cookies and local storage mechanisms. Under Section 25 of the German Telecommunications-Telemedia Data Protection Act (TDDDG):
Technically Necessary Storage
Permissible without consent pursuant to § 25(2) No. 2 TDDDG. We store your consent decision in the cookie bevcon_consent (valid for 12 months) and local storage key bevcon_cookie_consent.
Non-Essential Services (Analytics)
Stored and executed strictly upon your explicit, prior consent (§ 25(1) TDDDG and Art. 6(1)(a) GDPR). You may revoke or modify your choices at any time via the Cookie Preferences modal.
5. Contact Inquiries & Project Submission Form
When you contact us by email or submit details via our Project Submission Form, the data provided (such as your name, corporate affiliation, email address, telephone number, and project documentation/specifications) is processed by BevCon.
Purpose and Legal Basis:
Processing is carried out in accordance with Art. 6(1)(b) GDPR (steps taken prior to entering into a contract, project feasibility review, tendering, and engineering preparation) and Art. 6(1)(f) GDPR (legitimate interest in processing business inquiries).
Confidentiality & Storage Duration:
All technical specifications and commercial feasibility documents submitted to BevCon are treated with strict confidentiality. Data is retained for the duration of the preliminary project review and any subsequent contract, or deleted once the inquiry has been conclusively resolved, subject to statutory retention obligations (e.g., German Commercial Code / Tax Code retention periods of 6 to 10 years).
6. Web Analytics (Vercel Web Analytics)
If you grant consent, we use Vercel Web Analytics to analyze website reach and aggregate visitor journeys. Vercel Web Analytics collects privacy-friendly, anonymized traffic data without tracking users across independent websites or selling personal data.
Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time in the Cookie Settings.
7. Links to Social Media (LinkedIn)
We provide links to our corporate presence on LinkedIn. These are implemented as direct hyperlinks. No user data is transferred to LinkedIn when simply loading our website. When you click the link, you leave our site and the data processing guidelines of LinkedIn Ireland Unlimited Company apply.
8. Your Rights as a Data Subject
Under the GDPR, you have the following enforceable rights:
- Right of Access (Art. 15 GDPR): Confirmation of whether your personal data is being processed and copies of such data.
- Right to Rectification (Art. 16 GDPR): Correction of inaccurate or incomplete personal data.
- Right to Erasure (Art. 17 GDPR): Deletion of your data, provided no statutory retention obligations prevent it.
- Right to Restriction of Processing (Art. 18 GDPR): Restriction of data processing under certain conditions.
- Right to Data Portability (Art. 20 GDPR): Receipt of your data in a structured, commonly used format.
- Right to Object (Art. 21 GDPR): Objection to processing based on legitimate interests (Art. 6(1)(f) GDPR).
- Right of Revocation (Art. 7(3) GDPR): Revocation of any previously granted consent at any time with effect for the future.
To exercise any of these rights, simply email us at bier@bevcon.net.
9. Competent Supervisory Authority
Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for BevCon (Hamburg, Germany) is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg · Germany
Tel.: +49 40 428 54 - 4040
Email: mailbox@datenschutz.hamburg.de
Website: https://datenschutz-hamburg.de