Skip to content
Call directly+49 5126 80 47 737

Privacy policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator: Patrick Bußmann, Bußmann IT, Hasenwinkel 1, 31191 Algermissen, Germany, email: patrick.bussmann@bussmann-it.de.

2. Hosting

This website is hosted by Cloudflare, Inc. For details on how your data is handled, please refer to Cloudflare's privacy policy:https://www.cloudflare.com/privacypolicy/.

The use of Cloudflare is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in ensuring the most reliable and secure presentation of our website.

Cloudflare, Inc. is a US provider; a transfer of data to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework. A data processing agreement (Art. 28 GDPR) is in place with Cloudflare on the basis of the terms provided by Cloudflare.

When you submit a form on this website, your details are transmitted to our form endpoint (api.patrickbussmann.de). It runs on a server we operate with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. The request is routed through Cloudflare's network. For details, see Hetzner's privacy policy:https://www.hetzner.com/legal/privacy-policy/.

The use of Hetzner is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in processing your request securely and reliably on servers in Germany. A data processing agreement (Art. 28 GDPR) is in place with Hetzner.

3. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Responsible party

The responsible party for data processing on this website is:

Patrick Bußmann
Bußmann IT
Hasenwinkel 1
31191 Algermissen, Germany
Email: patrick.bussmann@bussmann-it.de

4. Data collection on this website

Enquiry form

If you send us an enquiry via the form on our service pages, we process the data you provide: name, email address, phone number (optional), your message (optional), the topic or package you selected, if any, and, where requested, the address of your website. The data is transmitted encrypted via HTTPS to our form endpoint (api.patrickbussmann.de). We use it to process your enquiry, to reply to you and in case of follow-up questions.

The processing of this data is based on Art. 6 (1) (b) GDPR, if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR).

To prevent abuse and bots, we also store the time of submission, the IP address and the user agent (browser identifier) of the request (Art. 6 (1) (f) GDPR). We do not share your data with third parties without your consent.

Storage period: We store your form data until your enquiry has been processed; if a contract is concluded, the statutory retention periods apply (§ 147 AO, § 257 HGB). The connection data collected for bot prevention is deleted as soon as it is no longer required for this purpose.

Telephone contact (telephone service)

If we are not available in person, calls to the phone number given on this website may be answered by our telephone service, ebuero AG (Hauptstraße 8, 10827 Berlin, Germany). The data you provide (name, phone number, concern) is recorded and forwarded to us to process your concern and to call you back (Art. 6 (1) (b) GDPR, for general enquiries Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with ebuero AG. Details:https://www.ebuero.de/datenschutz.

Appointment booking (Cal.com)

On our booking page, you can optionally load a booking widget from Cal.com. The widget is only loaded after your explicit consent (click on “Load booking widget”). This establishes a connection to Cal.com, Inc. servers. Cal.com's privacy policy can be found at:https://cal.com/privacy.

Usage is based on your consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time by not loading the widget.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

5. Ad measurement and analytics: Google Ads, Meta Pixel, PostHog

Google Ads conversion tracking

We run ads via Google Ads. To measure whether these ads work, we use Google's conversion tracking (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Cookies are set and information is transmitted to Google; a transfer to the USA (Google LLC) cannot be ruled out. Google is certified under the EU-US Data Privacy Framework.

Cookies and other information are only stored on or read from your device if you have previously given your consent via our notice banner (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG).

We use Google's so-called Consent Mode. This means: as long as you have not given consent, the Google script is embedded on the page but works in a restricted mode. It does not store or read cookies or other information on your device and does not transmit advertising identifiers. In this case, only the information that an ad click led to an enquiry or to a click on our phone number is transmitted, without reference to your person; Google estimates statistical values from this. We base this cookieless measurement on our legitimate interest in measuring the success of our advertising (Art. 6 (1) (f) GDPR). Full measurement with cookies is only activated after your consent. So that an enquiry can be attributed to the original ad click even without a cookie, Google's click identifier (for example the URL parameter "gclid") is passed along in the address when you move between our pages. It contains no information about you, only an identifier of the ad click.

Further information:https://policies.google.com/privacy.

Meta Pixel (Facebook/Instagram)

We also run ads on Facebook and Instagram. To measure their reach, to see whether an ad led to an enquiry or contact (conversion measurement), and to be able to show ads there again to visitors of our website (remarketing), we use the Meta Pixel. The provider is Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland ("Meta").

The Meta Pixel is only loaded if you have given consent via our notice banner.Without consent, no connection to Meta is established. After consent, your browser loads a script from Meta, sets a cookie ("_fbp") and transmits to Meta in particular the page visited, your IP address, browser and device information and the following events: page view, submitted enquiry or appointment request (without your form contents) and clicks on our phone number or WhatsApp link. Meta may link this data to your Facebook or Instagram account if you are logged in there and may also use it for its own purposes. We only receive aggregated statistics and cannot identify you from them.

The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw it at any time with effect for the future (see below).

We and Meta are joint controllers (Art. 26 GDPR) for collecting the data on our website and transmitting it to Meta. The details are set out in Meta's controller addendum:https://www.facebook.com/legal/controller_addendum. Any further processing is the sole responsibility of Meta. You can also exercise your rights (e.g. access or erasure) directly against Meta.

The data may be transferred to Meta Platforms, Inc. in the USA. Meta is certified under the EU-US Data Privacy Framework, on the basis of which (adequacy decision of the European Commission, Art. 45 GDPR) the transfer takes place. Further information in Meta's privacy policy:https://www.facebook.com/privacy/policy.

PostHog (website analytics on our own server)

To understand how our website is used and where visitors get stuck, we use the open-source software PostHog. We run PostHog ourselves on our server at Hetzner Online GmbH in Germany (h.bussmann.it); the data is not transferred to the maker of PostHog or any other third party.

PostHog is only loaded if you have consented via our banner. A cookie and local storage entries ("ph_…") are then set and the following data is processed: pages viewed, clicks and scrolling (also as a heatmap), referrer (e.g. search engine or ad), browser, device, approximate location (derived from the IP address, the IP address itself is not stored permanently) and a recording of your visit (session recording). All input in form fields is masked in session recordings; we cannot see what you type.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future (see below). Data is deleted after 12 months at the latest, session recordings after 30 days.

If you reach us via an ad click and then send an enquiry, we store the click ID (e.g. "gclid" or "fbclid") and campaign parameters from the address together with your enquiry in our customer management system. With your consent we keep these details in your browser's local storage ("bit-herkunft") until you send the enquiry. This lets us see later which ad led to an order.

Withdrawal

You can change your decision on Google Ads and the Meta Pixel at any time with effect for the future. The following button deletes your stored choice (entries "ads-consent" and "ads-consent-umfang" in your browser's local storage) and removes the Meta cookie "_fbp"; you will be asked again on your next page view, and nothing is loaded from Meta until then.

6. Cookies and local storage

Without your consent, this website does not set any cookies for tracking or analytics purposes. Only your decision on advertising tracking is stored in your browser's local storage (localStorage). After you submit the enquiry form, a random identifier is also kept in session storage (sessionStorage) until the confirmation page is shown, so that an enquiry is only counted once. This data remains in your browser and is not transmitted to us. Google and Meta only set the cookies required for conversion tracking after you have consented (see section 5).

7. Your rights

You have the following rights regarding your personal data:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6 (1) (f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); for Lower Saxony this is Die Landesbeauftragte für den Datenschutz Niedersachsen. For this and any other questions about personal data, you can contact us at any time: patrick.bussmann@bussmann-it.de.