1. Controller

BS Online Services GmbH
Grünerstraße 2
90763 Fürth
Germany

Email: [email protected]
Phone: +49 157 38177287

Data Protection Officer (internal):
Scarlett de Mesa

2. General Information on Data Processing

We take the protection of your data very seriously. Personal data is processed exclusively in accordance with applicable law (GDPR, BDSG, TTDSG).

3. Nature and Purpose of Data Processing

Our website enables customers to present their book collections digitally. Content and related customer accounts are set up exclusively by the site administrator. Customers receive login credentials for a personal account where they can view their books.

Data collected and stored may include, among other things:

• Customer name and email address
• Book data (title, condition, description)
• Book images
• IP address when using the site
• Log data for system security

Purpose of processing:

• Providing a password-protected customer account
• Managing digital book collections
• Communicating with the customer
• Security and stability of the website

The legal basis is Art. 6 (1)(b) GDPR (performance of a contract) and Art. 6 (1)(f) GDPR (legitimate interest).

4. Hosting & Storage

Our website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
www.hetzner.com

Images and media files for book collections are stored in Hetzner Storage Buckets. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

5. User Accounts

Self-registration on the website is not available. Accounts are created by the administrator and provided to the respective customers. Customers thereby gain access to their digital book data.

6. Uploaded Content

All content — including photos and descriptions — is created and uploaded by the website administrator. Customers do not upload their own content. The data is accessible only via the personal customer account.

7. SSL/TLS Encryption

This site uses SSL/TLS encryption for secure data transmission. You can recognize an encrypted connection by the lock icon in your browser and by the “https://” prefix.

8. Cookies

Our website uses only technically necessary cookies required for operation and login. Their use is based on § 25 (2) No. 2 TTDSG and Art. 6 (1)(f) GDPR.

9. Your Rights

You have the right:

• to access your stored data (Art. 15 GDPR)
• to rectification (Art. 16 GDPR)
• to erasure (Art. 17 GDPR)
• to restriction of processing (Art. 18 GDPR)
• to data portability (Art. 20 GDPR)
• to object to processing (Art. 21 GDPR)

Please send your request to: [email protected]

10. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
www.lda.bayern.de

11. Data Processing Agreements

Where external service providers are used in connection with the processing of personal data, data processing agreements pursuant to Art. 28 GDPR are in place. We currently use only Hetzner as our hosting and storage provider.

12. Version

This privacy policy is current as of: March 29, 2025