BIO-H2 Umwelt GmbH Logo
DE EN
Privacy

Privacy Policy

1 · Controller

Controller: Bio-H2 Umwelt GmbH · Im Steinfeld 10 · 07751 Jena · Deutschland

Represented by managing director Olaf Luschnig.

Phone +49 3641 53 44 391 · E-mail info@bio-h2.de

Commercial register: Amtsgericht Jena, HRB 515492 · USt-ID DE278203309

No data protection officer has been appointed. Please send data protection requests to the address stated above.

2 · Website access and server logs

Data categories: when the website is accessed, IP address, date and time, requested file, transferred data volume, status code, referrer, and browser and operating system identifier may be processed.

Purpose: delivery of the website and stability and security of operations.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and trouble-free provision of the website.

Storage period: no specific public retention period for server logs is evidenced by ALL-INKL. The logs are deleted when they are no longer required for the stated purposes; they are generated by the hoster and deleted there at short notice.

Recipient: the website is hosted by ALL-INKL.COM - Neue Medien Münnich, Inhaber René Münnich, Hauptstraße 68, 02742 Friedersdorf. The hoster processes data as a processor under Art. 28 GDPR.

The server location is Germany. No transfer to third countries takes place in this context.

3 · Browser Storage (No Cookie, No Tracking)

The website sets no cookies and uses no analytics, advertising or tracking services.

Data categories: localStorage stores bioh2:lang for language selection and bioh2:theme for light or dark display. sessionStorage stores bioh2.introSeen so that the intro animation does not run again in the same session.

Purpose: providing the language and display settings selected by the user and controlling the intro animation within the session.

Legal basis: Section 25(2) no. 2 TDDDG, because this storage supports the display requested by the user, in conjunction with Art. 6(1)(f) GDPR.

Storage period: the values remain on the device, are not transmitted and can be deleted via the browser settings. The sessionStorage entry ends with the session.

4 · Contact Form

Data categories: mandatory fields are name, e-mail address, subject, message and confirmation of the privacy notices. The selected language version is also transmitted.

Purpose: receiving and answering your request.

Processing takes place on the same webspace, without a third-party provider. The message is sent as an e-mail to info@bio-h2.de and is not stored in a file or database on the server.

Legal basis: Art. 6(1)(b) GDPR for contract-related requests, otherwise Art. 6(1)(f) GDPR with the legitimate interest in answering requests. The confirmation in the form is added as Art. 6(1)(a) GDPR.

You may withdraw consent at any time. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Storage period: the data is processed until the request has been finally handled and is then deleted, unless commercial or tax retention obligations prevent deletion.

Voluntary provision: the information is not required by law or contract. Without a name and e-mail address, however, an answer is not possible.

5 · Protection of the Form Against Misuse

Data categories: the form uses an arithmetic question and an additional field invisible to visitors (Honeypot). Both are self-built; no reCAPTCHA, hCaptcha or other third-party provider is used and no external server is contacted.

To limit submissions to five per hour, the server stores a cryptographic check value of the IP address (HMAC-SHA-256) together with the submission timestamps. The IP address itself is not stored. The check value is pseudonymous, not anonymous.

In addition, a check value of the one-time arithmetic question is stored so that it cannot be used more than once.

Purpose: preventing automated mass submissions and maintaining availability of the contact form.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is preventing automated mass submissions and maintaining form availability.

Storage period: check values of the IP address are stored for one hour, check values of the arithmetic question for 30 minutes. They are then deleted automatically.

6 · What Does Not Take Place

The sections above describe all processing carried out by this website. Beyond that, the following in particular does not take place:

  • no analytics, no tracking, no reach measurement, no profiling
  • no external fonts, no CDN, no embedded third-party content; all resources come from our own server
  • no automated decision-making and no profiling under Art. 22 GDPR
  • no disclosure to third parties beyond the hoster named above, except where required by law

7 · Rights of Data Subjects

Subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection (Art. 21 GDPR) and withdrawal of consents granted (Art. 7(3) GDPR).

8 · Right to Lodge a Complaint

The authority responsible for Bio-H2 Umwelt GmbH is the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit, Häßlerstraße 8 · 99096 Erfurt · Postfach 900455 · 99107 Erfurt · Telefon +49 361 57311 2900.

You may also lodge a complaint with any other data protection supervisory authority.

9 · Version and Changes

Version date: 01.08.2026. We adapt this privacy policy if the website's technical functions or the legal situation change.

The English version is provided for clarity for English-speaking visitors. The German version prevails.