Privacy

Controller

NeoBid GmbH, An der Ziegelei 15, 82065 Baierbrunn, Germany. Telephone: +49 (0)89 31839353. Email: info@neobid.de. Please contact us with questions about the processing of your personal data.

General information

This information describes the processing of personal data on the existing NeoBid website. The GDPR and the German Federal Data Protection Act (BDSG) are particularly relevant. The statement is updated when the website or its services change. Terms follow Article 4 GDPR. According to the existing statement, there is currently no obligation to appoint a data protection officer.

Information on your device

When we store or access information on your device, for example through cookies, we distinguish strictly necessary functions (section 25(2), point 2 TDDDG) from other purposes. Analytics or marketing generally require your consent under section 25(1) TDDDG. Subsequent processing of personal data also requires a legal basis under the GDPR. Consent may be withdrawn with future effect.

Hosting by Wix

Hosting provider according to the existing statement: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Accessing the website involves processing IP addresses, access data, metadata and communication data in particular. The purpose is secure and stable website provision; the legal basis is Article 6(1)(f) GDPR. Israel is covered by an adequacy decision under Article 45 GDPR. Wix uses globally distributed data centres and content delivery networks. Further transfers to third countries must meet the requirements of Articles 44 onwards GDPR.

Server log files

Access generates data including date and time, the requested file, referrer URL, access status, browser, operating system, IP address and transferred data volume. Processing serves website display, stability and security under Article 6(1)(f) GDPR. The existing statement specifies retention for a maximum of 14 days followed by deletion or anonymisation.

Cookies

Cookies may be stored for a session or beyond it. They may support technical operations, analytics or service improvements. We obtain consent for non-essential cookies. Wix may use security, session or load-balancing cookies. Consent can be withdrawn through cookie settings.

Consent management

The existing website names Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, as the consent management provider. Consent and withdrawal are recorded to respect and demonstrate your settings. The stated legal bases are Article 6(1)(c) and (f) GDPR.

Contact by email or form

We process the information you provide, such as your name, email address, telephone number, company and message, to handle your enquiry. Article 6(1)(b) GDPR applies to contract-related enquiries; otherwise, Article 6(1)(f) GDPR may provide the basis. Once the enquiry has been fully handled, the data are deleted unless retention obligations or other lawful storage purposes apply.

HubSpot: forms, appointments and CRM

The existing statement names HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA, and HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. Stated purposes are contact management, forms, appointment booking, marketing emails and their analysis. Contact details, company information and interactions with the website and emails may be processed. The specific legal basis depends on the purpose: pre-contractual steps, legitimate interests or consent.

Analytics and marketing

Tracking cookies and comparable analytics or marketing technologies may only be used after appropriate consent. This must be distinguished from processing necessary to handle a contact or appointment request. The existing statement refers to possible processing in the USA and HubSpot certification under the EU–U.S. Data Privacy Framework. Further information: HubSpot privacy policy ↗︎.

External links

Our website contains links to external services, such as specialist sources, social networks and meeting-booking pages. A simple link does not itself embed content from the destination website on our website. If you follow such a link, you leave our site; the destination provider’s privacy notice applies there. This differs from third-party services or content that load when you visit our website. Where applicable, we describe their use and data processing in the relevant sections of this notice.

Recipients and service providers

Personal data may only be disclosed where there is an appropriate legal basis, such as consent, contractual performance, a legal obligation or legitimate interests. The existing statement refers to processing agreements under Article 28 GDPR with hosting, IT and marketing service providers.

Security

We implement appropriate technical and organisational measures under Article 32 GDPR. The production website uses an encrypted connection.

Retention periods

Data are retained for as long as necessary for the relevant purpose or required by statutory retention obligations. They are deleted when these grounds no longer apply. Purpose-specific periods and exceptions take precedence over a general retention period.

Your rights

Subject to statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You may complain to a data protection supervisory authority (Article 77), particularly where you habitually reside, work or believe an infringement occurred. For private companies in Bavaria, the competent authority is the Bavarian State Office for Data Protection Supervision ↗︎ .

Withdrawal of consent and objections

You may withdraw consent at any time with future effect; this does not affect the lawfulness of earlier processing. You may object to processing under Article 6(1)(e) or (f) GDPR on grounds relating to your particular situation. For direct marketing, you may object to processing for that purpose at any time. Contact: info@neobid.de.

Automated decisions

The existing statement says that no automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.

Quick Check and price indication

When you use the Quick Check, we process your information about energy requirements, use and the desired supply period, as well as your first name, surname, business email address and your company. This processing serves to calculate and immediately display the requested price indication and to handle your enquiry. The legal basis is Article 6(1)(b) GDPR where processing is required to prepare a potential business relationship; otherwise Article 6(1)(f) GDPR may apply to handling business enquiries.

We use HubSpot to transmit and manage the enquiry. The indication shown in the result, the price date and the underlying requirement data may be assigned to the contact record. Security checks such as email-domain validation, a honeypot and a limited number of requests per connection protect against misuse. Personal webmail addresses are not accepted. Registration for marketing emails only takes place on the basis of separate, voluntary consent.