Status: 02.10.2026
1. Overview
This privacy policy informs you about the personal data we process when you visit our website www.bos-akademie.de, place orders in our shop, submit inquiries, and subscribe to our newsletter. Separate privacy policies apply to our apps.
- Feuerwehrhelfer und BOS-Helfer: www.bos-akademie.de/datenschutzerklaerung-feuerwehrhelfer
- BMA-Trainer: www.bos-akademie.de/datenschutzerklaerung-bma-trainer
2. Responsible person
Bollin Consulting GmbH
Sebaldstraße 23, 73525 Schwäbisch Gmünd, Germany
Telephone: 07171 99 810 31
Email: info@bos-akademie.de
A data protection officer has not been appointed at this time, as we believe there is no legal obligation to do so. Please direct any data protection inquiries to info@bos-akademie.de.
3. Hosting and server log files
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you access the website, information transmitted by your browser is automatically stored in server log files: IP address, date and time of access, page accessed, referrer URL, browser type, and operating system. We need this data to ensure the website is secure and stable. The legal basis for this is Article 6(1)(f) GDPR. We have concluded a data processing agreement with IONOS. The log files are automatically deleted by the hosting provider, at the latest after a few weeks.
Our website uses TLS encryption. You can recognize it by the padlock symbol and "https://" in the address bar.
4. Cookies and consent management
We use cookies and similar technologies. Technically necessary cookies, such as those for the shopping cart, customer account, and saving your cookie preferences, are set on the basis of Section 25 Paragraph 2 of the German Telemedia Act (TMG) and Article 6 Paragraph 1 Letter f of the GDPR. All other cookies, especially those used for statistical purposes, are only set with your consent in accordance with Section 25 Paragraph 1 of the TMG and Article 6 Paragraph 1 Letter a of the GDPR.
We use the WordPress plugin Complianz to manage your consent. It stores your selection in a cookie on your device. The data is processed on our server and is not transmitted to the manufacturer. You can change or withdraw your consent at any time via the cookie settings on our website. An overview of the cookies used can be found in our cookie policy.
5. Orders in the shop and customer account
For orders placed in our shop, we process the information from the order form: name, organization or company, billing and shipping address, email address, telephone number (if applicable), VAT identification number, and order details. We need this data to conclude and fulfill the contract. The legal basis for this processing is Article 6(1)(b) GDPR. We use WooCommerce for the shop functions. The data is stored on our server at IONOS.
When you create a customer account, we store your information and order history so that you can process future orders more quickly and view previous orders. The legal basis for this is Article 6(1)(b) GDPR. You can have your customer account deleted at any time; simply send an email to info@bos-akademie.de.
We create invoices and delivery notes using the "PDF Invoices & Packing Slips" plugin on our own server and send them to you via email.
We process orders via email and inquiries submitted through our quote request function in the same way. Using the quote request function, we create a quote as a PDF from your information and send it to you via email.
6. Payment
We offer payment in advance and, for existing customers and for software and licensed products, by invoice. In both cases, you transfer the amount to us yourself. We do not use a payment service provider. We receive your payment details from our bank, insofar as this is necessary for allocating the payment (Art. 6 para. 1 lit. b and lit. c GDPR).
7. Shipping via DHL
For shipping purposes, we will transfer your name and delivery address to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn (Art. 6 para. 1 lit. b GDPR). We will not share your email address and telephone number with DHL.
8. Contact form, email and telephone
When you contact us via the contact form, email, or telephone, we process your information to handle your inquiry. We use the WPForms plugin for the contact form. The information is sent to us via email. The legal basis for this processing is Article 6(1)(b) GDPR if your inquiry relates to a contract or pre-contractual measures; otherwise, it is Article 6(1)(f) GDPR. Our legitimate interest lies in processing your inquiry. We delete the data once the inquiry has been fully processed, unless statutory retention obligations apply.
9th Newsletter
When you subscribe to our newsletter, we process your email address and, if applicable, voluntary information such as your name. We use the double opt-in procedure: After registering, you will receive an email in which you confirm your subscription. We store the time of registration and confirmation, as well as the IP address, to be able to prove the subscription. The legal basis for this is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time via the unsubscribe link in each issue.
We use the WordPress plugin MailPoet for our newsletter. Subscriber data is stored on our server. The newsletter is sent via the "MailPoet Sending Service" of Automattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland. For this purpose, your email address and the newsletter content are transmitted to this service. Processing by the parent company, Automattic Inc., in the USA is possible. This is based on a data processing agreement with EU standard contractual clauses and Automattic Inc.'s certification under the EU-US Data Privacy Framework.
MailPoet tracks whether a newsletter has been opened and which links have been clicked. We use this data to improve our newsletters. This is covered by your consent to receive the newsletter.
After you unsubscribe, we will delete your address from our mailing list. We can store it on a suppression list so that you do not receive any further newsletters. We use the data on the suppression list only for this purpose (Art. 6 para. 1 lit. f GDPR).
10. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics collects information about your use of our website, such as pages visited, time spent on the site, device used, and approximate region. Google Analytics 4 does not store full IP addresses. We use the data to improve our website.
The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Google Analytics will not be loaded without your consent. You can withdraw your consent at any time via the cookie settings. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses also apply. We have concluded a data processing agreement with Google. The data will be automatically deleted after the retention period set in Google Analytics, at the latest after 14 months.
11. Storage duration
Unless a more specific retention period is stated in this declaration, we store personal data only as long as necessary for the respective purpose. Statutory retention obligations remain unaffected. We retain invoices and accounting documents for eight years, commercial and business correspondence for six years, and books and annual financial statements for ten years (§ 147 AO, § 257 HGB).
12. Recipient
We only disclose personal data if this is necessary for the performance of a contract, if we are legally obligated to do so, for example to tax authorities, if you have given your consent, or if we have a legitimate interest. Recipients include, in particular, the service providers mentioned in this statement, our bank, and our tax advisor. We only engage service providers acting on our behalf on the basis of a data processing agreement.
13. Your rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw your consent at any time with effect for the future (Art. 7 para. 3). For your requests, simply send an email to info@bos-akademie.de.
Right to object pursuant to Article 21 GDPR: If processing is based on Article 6(1)(e) or (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, or the processing serves the purpose of establishing, exercising or defending legal claims. You may object to processing for direct marketing purposes at any time without giving reasons.
14. Right of appeal
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.
15. Obligation to provide
You do not need to provide any personal data to visit the website. For an order, we require the information marked as mandatory in the order form. Without this information, we cannot conclude the contract.
16. No automated individual decisions
Automated decision-making, including profiling as defined in Article 22 GDPR, does not take place.
17. Changes
We will update this privacy policy if the legal situation, services, or data processing practices change. The version published on the website at any given time applies.
