Home/Privacy

Privacy Policy

Last updated: July 2026

1. Data Protection at a Glance

The protection of personal data is important to us. Below we inform you about which personal data is processed when you visit this website and use our online services, for what purposes this takes place, and on what legal basis the processing is based.

Personal data is any information relating to an identified or identifiable natural person. This includes in particular name, contact details, e-mail address, telephone number, IP address, content from contact enquiries, as well as data from applications including voluntarily submitted documents.

2. Controller

The controller responsible for the data processing on this website is:
Bock Maschinenbau GmbH
Maierhofstraße 38
73547 Lorch
Germany
Phone: +49 7172 / 9100-0
E-mail: info@bock-gmbh.com

3. General Information on Data Processing

Legal Bases

We process personal data only where a legal basis exists for doing so. The following are particularly relevant:

  • Art. 6 Abs. 1 lit. a DSGVO for consent,
  • Art. 6 Abs. 1 lit. b DSGVO for carrying out pre-contractual measures or for the performance of a contract,
  • Art. 6 Abs. 1 lit. c DSGVO for compliance with legal obligations,
  • Art. 6 Abs. 1 lit. f DSGVO for safeguarding legitimate interests,
  • § 25 TDDDG for the storage of information on end devices or access to such information,
  • § 26 BDSG or Art. 6 Abs. 1 lit. b DSGVO for the processing of personal data in the application procedure.

Storage Period

We store personal data only for as long as is necessary for the respective purpose. The data is subsequently deleted, unless statutory retention obligations, evidence obligations or legitimate interests preclude this.

If an enquiry leads to an order or contract, the associated documents and communication data are subject to the retention obligations under commercial and tax law. We therefore retain this data pursuant to § 257 HGB and § 147 AO for generally six or ten years respectively and delete it once the periods have expired. The legal basis for this retention is Art. 6 Abs. 1 lit. c DSGVO.

Where no employment relationship is established, we generally delete application data no later than six months after completion of the application procedure, unless longer storage is required on the basis of consent or on account of legal claims.

4. Hosting and Server Log Files

This website is operated by an external hosting service provider. When the website is accessed, technically necessary access data is processed in order to provide the website securely, stably and with good performance.

Hosting service provider used:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

In this context, the following data in particular may be processed in server log files:

  • IP address,
  • date and time of access,
  • requested URL and files accessed,
  • HTTP status code and volume of data transferred,
  • referrer URL,
  • browser type and browser version,
  • operating system used,
  • host name of the accessing device.

Server log files are regularly deleted after a short time, unless a security-relevant event (e.g. an attempted attack) requires longer storage for evidentiary purposes.

The processing takes place on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure, stable and error-free provision of our online services. Insofar as the hosting service provider processes personal data on our behalf, this takes place on the basis of a data processing agreement pursuant to Art. 28 DSGVO.

5. SSL / TLS Encryption

For security reasons and to protect confidential content, this website uses SSL / TLS encryption. You can recognise an encrypted connection by the address bar of your browser showing “https://”.

We use technically necessary cookies and, only after your consent, analytics technologies as well as the Google Maps embedding on the contact page. The selection is managed via our consent banner.

Technically Necessary Cookies

Technically necessary cookies are required for the website to function properly. This includes in particular a consent cookie in which your selection regarding cookie and analytics settings is stored; it serves as evidence of your selection. This cookie is stored for up to 180 days. The legal basis is Art. 6 Abs. 1 lit. f DSGVO in conjunction with § 25 Abs. 2 TDDDG.

Also technically necessary is a language cookie (bm-lang) that stores the display language you have selected so that the website appears in this language on a subsequent visit. It is set exclusively after your active language selection, contains only the language code (e.g. “de”, “en”), does not serve analytics or tracking purposes and is stored for up to 12 months. The legal basis is § 25 Abs. 2 Nr. 2 TDDDG (storage) in conjunction with Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in a user-friendly website that appears in your language).

Analytics Only with Consent

Analytics functions are only activated once you give your consent in the consent banner. The legal basis is Art. 6 Abs. 1 lit. a DSGVO in conjunction with § 25 Abs. 1 TDDDG. You can withdraw a consent you have given at any time with effect for the future.

Open cookie settings

7. Google Analytics 4

Insofar as you have consented, we use Google Analytics 4 on this website, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Google Analytics helps us to understand how visitors use our website. In this context, information may in particular be processed regarding page views, duration of use, interactions, the end devices used, browser information, referrer URLs, as well as shortened or otherwise processed IP addresses.

The integration takes place using Google Consent Mode and is deactivated by default. The Google tag is only loaded once consent has been given. The legal basis is Art. 6 Abs. 1 lit. a DSGVO in conjunction with § 25 Abs. 1 TDDDG. You can withdraw your consent at any time via the cookie settings.

It cannot be ruled out that, in this context, data may also be transferred to Google companies outside the EU or the EEA, in particular in the USA. Transfers to third countries take place only on the basis of appropriate safeguards or other legally permissible mechanisms; you can request a copy of the appropriate safeguards from us.

8. Fonts, Icons and External Maps

Fonts and Icons (Self-Hosted)

Fonts and icons are delivered exclusively locally from the server of this website. In doing so, no connection to third-party servers (e.g. Google Fonts, external font or icon CDNs) is established and your IP address is not transmitted to third parties for this purpose.

Google Maps

On our contact page, you can load an interactive map of the “Google Maps” service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. The map remains blocked by default and is only activated after your express consent. Only then is a connection to Google established.

We use Google Maps to display our location interactively and to provide route functions. Within the map, information from our Google company profile may also become visible, in particular company name, address, route options and publicly visible reviews.

After the map has been activated, in particular your IP address, browser and device data, referrer URL, date and time of access, as well as usage data relating to the map function may be transmitted to Google. Google may also use cookies or comparable technologies. If you are logged into your Google account while using the service, Google may associate the use with your account. The processing takes place exclusively on the basis of your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO in conjunction with § 25 Abs. 1 TDDDG. You can withdraw your consent at any time via the cookie settings with effect for the future.

When using Google Maps, a transfer of personal data to Google LLC in the USA cannot be ruled out. Further information can be found in Google's privacy policy as well as in the additional terms of use for Google Maps. Irrespective of this, you can also open Google Maps directly via an external link. In this case, the data transfer to Google likewise only takes place after your active click on the link.

9. Contact Form and Contact by E-mail or Telephone

If you contact us via the contact form, by e-mail or by telephone, we process the data you provide in order to handle your request. In the case of the contact form, this concerns in particular name, company, e-mail address, telephone number, type of enquiry and the content of your message.

Via the contact form, you can also voluntarily submit file attachments. Supported are PDF files, technical drawings and CAD-related formats (DXF, DWG, STEP, STP, IGES, IGS) as well as common image formats (PNG, JPG or JPEG, TIFF, BMP, WEBP). Other file formats – in particular office documents such as Word or Excel – are currently not accepted and are rejected for security reasons. Up to five files with a total size of no more than 20 MB may be submitted. The files are used only to handle your enquiry, for technical examination and, where applicable, for the preparation of a quotation or coordination with you.

Responsibility for submitted documents. Please only submit documents via the contact form that you are authorised to disclose to us. Technical drawings, parts lists or comparable documents may contain personal data of third parties – such as the names of processors or contact persons – as well as trade and business secrets. As the sender, you are responsible for ensuring that you are authorised to transmit this content and that no rights of third parties are infringed. We use submitted documents exclusively for the purpose pursued with your enquiry (purpose limitation), treat them confidentially and pass them on only to the internally responsible bodies. We delete documents that are no longer required as soon as the purpose ceases to apply and no statutory retention obligations preclude this. If your enquiry leads to an order, we may retain the associated documents pursuant to § 257 HGB and § 147 AO for the periods provided for therein.

In addition, when the form is submitted, we process technical accompanying data, in particular a shortened (anonymised) IP address, the time of transmission as well as technical anti-spam information, in order to prevent misuse and to ensure the functionality of the form. To limit automated bulk enquiries, your IP address is processed exclusively in shortened or hashed form.

File attachments are technically checked for permissible formats, number of files and total size. Impermissible or security-critical files may be rejected. The legal basis is Art. 6 Abs. 1 lit. b DSGVO insofar as your enquiry is directed at pre-contractual measures or a contract. In all other cases, the processing takes place on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the proper handling of incoming enquiries and in secure communication.

Depending on your request, your message is forwarded internally to the responsible contact persons, for example to technical sales in the case of technical enquiries or quotation requests. If you select an application as the type of enquiry, we will redirect you to our application form; should an application nevertheless be received via the contact form, it will be forwarded to our applications mailbox and exclusively to the persons involved in the application procedure.

After submitting the form, you will automatically receive an acknowledgment of receipt, including a reference number, at the email address you provided. This confirmation forms part of the processing of your inquiry; no separate consent is required for this purpose.

The provision of the information marked as mandatory is neither legally nor contractually required; however, it is necessary in order for us to be able to handle your enquiry. Without this information, we cannot handle your request, or can do so only to a limited extent. All other information is voluntary. No consent is required for the handling of your enquiry; the confirmation in the form that you have taken note of this privacy policy is exclusively an acknowledgement and not consent under data protection law.

10. Application Form

Via our careers page, you can submit a quick application. Mandatory information is your name, your e-mail address and your telephone number. In addition, we process the desired area or the specific position, voluntary message texts as well as, if uploaded by you, application documents (e.g. CV, cover letter, references, certificates) as PDF files. When submitting, we also process technical accompanying data, in particular a shortened (anonymised) IP address, the time of transmission as well as anti-spam information, in order to prevent misuse and to ensure the functionality of the form.

The upload in the application form is currently limited to up to 5 PDF files with a total of no more than 20 MB; only PDF files are permitted. The files are technically checked for format, number and size and used exclusively to process your application. The submitted information and files are not permanently stored on our web server; the temporary upload files are deleted immediately after submission. Your application is delivered by e-mail to the mailbox responsible for applications and retained there within the deletion period specified below.

After submitting the form, you will automatically receive an acknowledgment of receipt, including an application number, at the email address you provided. This confirmation forms part of the processing of your application; no separate consent is required for this purpose.

Please do not submit any special categories of personal data and no application photo. To process your application, we do not require any information on special categories within the meaning of Art. 9 DSGVO – such as regarding health or disability, ethnic origin, religious or philosophical beliefs, trade union membership or sexual orientation – nor any photograph. Please omit such information where possible or redact it. Should you nevertheless voluntarily submit such data, we will process it exclusively within the scope of your application and delete it together with the other application data. The legal basis is your consent pursuant to Art. 9 Abs. 2 lit. a DSGVO, which lies in the voluntary submission and which you can withdraw at any time with effect for the future; in the employment context, additionally § 26 Abs. 3 BDSG.

The legal basis for the processing of your application data is Art. 6 Abs. 1 lit. b DSGVO (carrying out pre-contractual measures at your request); additionally, insofar as relevant and applicable, § 26 Abs. 1 BDSG. Insofar as we have additional legal obligations to fulfil, the processing takes place additionally on the basis of Art. 6 Abs. 1 lit. c DSGVO. Any temporary retention going beyond the selection decision is based on Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest lies in the defence against, or the establishment of evidence in connection with, any claims under the General Equal Treatment Act (AGG). Application documents are received only by those persons in our company who are involved in carrying out the application procedure.

If no employment is entered into, we generally delete your application data no later than six months after receipt of the rejection or completion of the application procedure. This period is based on the periods for asserting possible claims under the AGG (§ 15 Abs. 4 AGG, § 61b ArbGG). Longer storage takes place only insofar as statutory retention obligations or ongoing legal disputes require this, or you have expressly consented to longer storage (e.g. inclusion in an applicant pool).

The provision of the mandatory information is necessary for carrying out the application procedure; without it, we cannot process your application. All other information is voluntary.

11. Recipients and Transfers to Third Countries

Within our company, access to personal data is granted only to those bodies that require it to fulfil the respective purpose. External recipients are in particular hosting, e-mail and technical service providers as well as, where consent has been given, Google as an analytics and map service provider.

Insofar as personal data is transferred to recipients outside the European Union or the European Economic Area, this takes place only on the basis of appropriate safeguards, an adequacy decision or other legally permissible mechanisms. You can request a copy of the appropriate safeguards from us.

12. Rights of Data Subjects

Within the scope of the statutory requirements, you have in particular the following rights:

  • access pursuant to Art. 15 DSGVO,
  • rectification pursuant to Art. 16 DSGVO,
  • erasure pursuant to Art. 17 DSGVO,
  • restriction of processing pursuant to Art. 18 DSGVO,
  • data portability pursuant to Art. 20 DSGVO,
  • objection to processing pursuant to Art. 21 DSGVO,
  • withdrawal of consent given, with effect for the future.

To exercise your rights and for questions regarding data protection, a message to info@bock-gmbh.com is sufficient.

13. Right to Object

Right to object (Art. 21 DSGVO). Insofar as we process personal data on the basis of Art. 6 Abs. 1 lit. f DSGVO (legitimate interest), you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

14. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The authority responsible for Baden-Württemberg is in particular:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32
70025 Stuttgart

15. No Automated Decision-Making

A decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you does not take place (Art. 22 DSGVO).

16. Data Security and Currency

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access or unauthorised disclosure. We reserve the right to amend this privacy policy if the legal, technical or organisational framework conditions change.

Do you have questions about our services or about the data processing in the event of a contact enquiry? You can find out more on our page about contract manufacturing, steel construction and special machinery construction or directly via our contact form.