1. Controller and contact
Bouchmal Group is the public brand name used for this website and for commercial correspondence. Data-protection requests reach the controller through the published professional route, support@bouchmalgroup.com. Statutory provider information is published on the Impressum.
No data-protection officer is designated; the statutory thresholds for a mandatory designation are not met by the processing described here.
2. Website delivery and security
When this website is requested, hosting and security systems may process IP address, request time, requested URL, referrer, browser and device headers, language settings, security identifiers and error information. The restricted staff route may additionally process authentication and access-control information.
The purposes are to deliver the requested pages, maintain availability, prevent abuse, protect the service and diagnose faults. The intended legal basis is Article 6(1)(f) GDPR: the legitimate interest in operating a secure and functional business website. Data strictly necessary to provide a service requested by the visitor does not require optional-cookie consent.
3. Hosting providers and recipients
The site is hosted directly on Cloudflare Workers. Cloudflare provides static-asset delivery, dynamic request execution, security services and authoritative DNS for the bouchmalgroup.de zone. Restricted staff access is enforced with Cloudflare Access. The website uses a dedicated Cloudflare D1 database that holds website support records only. It is isolated from every other Bouchmal Group system and dataset, and no data is shared between them. A previous hosting deployment is retained solely as a rollback target and no longer serves the production hostnames. This website publishes no ticket, upload or status form.
Where you choose to contact us through the published WhatsApp channel, WhatsApp Ireland Ltd. receives and processes that conversation under its own terms. It is not used for hosting, for analytics or for any processing on this website itself.
4. Cookies and optional analytics
Hosting and security providers may set strictly necessary security cookies; authentication cookies may be used on the restricted staff route. Bouchmal Group stores two first-party preference cookies: bg_locale remembers the selected website language, while bg_privacy_preferences remembers the visitor's analytics choice and the applicable notice version. The language value contains one of en, de, ar, es, fr or zh-hans; the privacy value contains no visitor identifier. Both last for up to 180 days.
Cloudflare Web Analytics is optional and blocked by default. Its browser beacon loads only after the visitor accepts audience and performance analytics. Rejection leaves the website usable. It is excluded from the restricted staff dashboard. No advertising, remarketing, Meta pixel or embedded social-media tracking is installed. When analytics is active, the fixed withdrawal button revokes permission in one click. Details are provided in the Cookie Information.
5. Support-ticket migration status
This website carries no public ticket form, attachment upload or status lookup. Those pages load no submission form and no bot challenge, and the corresponding POST endpoints fail closed before reading or persisting any request content. Support runs by email instead.
At the migration checkpoint on 30 August 2026, each of the three support tables in the former Sites database contained zero rows; no support-ticket personal data was copied. A schema-only migration created the same three empty tables in the dedicated Cloudflare D1 database. Authorized staff access remains restricted through Cloudflare Access identity plus an explicit provider-side allowlist. The migration does not expand the purposes or recipients applicable to future records.
6. Public contact channels
One professional email route is published on this website: support@bouchmalgroup.com. The links open your own mail program with a subject line and a generic structure suggestion. No message content is transmitted through this website, and no visitor-supplied value is placed in a link parameter.
Mail sent to that address is received and stored in a Bouchmal Group mailbox hosted on Google Workspace, which acts as the hosting provider for that correspondence. The data processed is whatever you choose to include — typically company, country, commercial role, the requirement or offer concerned, and your reply address. It is used only to assess and answer your enquiry, on the basis of steps taken at your request prior to any agreement and the legitimate interest in responding to business enquiries. Correspondence is retained for as long as the enquiry and applicable record-keeping obligations require.
A business WhatsApp channel is published alongside the email route, reachable from the contact page. Opening it hands your message to WhatsApp: the conversation takes place in that service and not on this website, and WhatsApp Ireland Ltd. processes the message content, your WhatsApp profile number and the associated metadata under its own terms and privacy policy, as an independent controller for that processing. We use what you send there only to assess and answer your enquiry, on the same basis as an emailed enquiry, and we do not add a WhatsApp contact to any marketing list. Nothing is sent from this website: the link opens your own WhatsApp application with a fixed opening line, and you decide whether to send it. Email remains available and is the route we recommend for anything of substance. No telephone number is published and this website publishes no web form, so email and WhatsApp are the only two routes by which you can send us anything. Please do not send confidential documents, pricing or special-category personal data in a first message through either route; a secure route is confirmed before any exchange of sensitive material.
7. Retention
Cloudflare retains provider-side technical data according to the applicable Cloudflare agreement, data-processing addendum, security needs and provider policies. Bouchmal Group does not state an invented fixed log period.
Optional Cloudflare Web Analytics raw beacon data is retained under Cloudflare's current Web Analytics terms; Cloudflare states that unsampled raw beacon data is retained for seven days and dashboard analytics may remain available for six months.
At the migration checkpoint there were no support tickets and therefore no ticket-specific 180-day review dates to carry forward. Because this website carries no public form, no new support-ticket personal data is collected through it; email correspondence is retained as described in section 6.
8. International transfers
Hosting and communications providers may process data outside the European Economic Area. Transfers rely on the transfer mechanisms and contractual safeguards in the applicable provider agreements, and a copy of the relevant safeguard can be requested through the contact route above. Please do not send special-category data, payment-card data or unnecessary confidential material in a first message.
9. Your rights
Subject to the GDPR's conditions, you may request access, rectification, erasure, restriction, data portability or objection to processing based on legitimate interests. Where processing relies on consent, consent may be withdrawn for the future. You may also lodge a complaint with the competent data-protection supervisory authority.
Requests reach us through the contact route named in section 1. Identity may need to be verified proportionately before protected information is disclosed.
10. Required information and automated decisions
Technical request data is necessary to deliver and secure the website. No personal data is collected through a web form, because none is published. Bouchmal Group does not use this website for automated decision-making or profiling with legal or similarly significant effects.
11. Changes to this notice
This notice is updated when provider terms, access configuration or website features change. The version date at the top identifies the current text.