Privacy

Controller

The controller pursuant to Art. 4(7) GDPR is better decisions group GmbH, Mittelstraße 3 B, 12529 Schönefeld, Germany, email: info@bdg.io. Legally represented by Lukas Schomberg, Ina Schwarzenberg and Sabrina Wolter. The data protection officer can be reached via heyData GmbH, Schützenstraße 5, 10117 Berlin, www.heydata.eu, email: datenschutz@heydata.eu.

Legal bases for processing

The following provisions may serve as the legal basis for data processing:

• Art. 6(1)(1)(a) GDPR for processing for which consent is obtained.
• Art. 6(1)(1)(b) GDPR where processing is necessary to perform a contract.
• Art. 6(1)(1)(c) GDPR where processing fulfils a legal obligation.
• Art. 6(1)(1)(f) GDPR in the case of legitimate interests.

Processing outside the EEA

Where data is transferred to countries such as the United Kingdom, Canada or Israel, adequacy decisions of the EU Commission under Art. 45(3) GDPR safeguard the data. For the USA, the legal basis is an adequacy decision of the EU Commission where the provider is additionally certified under the EU-US Data Privacy Framework. Otherwise, Standard Contractual Clauses are the legal basis.

Retention period

Data is deleted as soon as it is no longer required for its purpose and no statutory retention obligations prevent deletion. For other permissible purposes, the data is restricted and not processed for other purposes.

Data subject rights

Data subjects have the following rights:

• Right of access
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time

There is also the right to lodge a complaint with a data protection supervisory authority about the processing of personal data.

Obligation to provide data

Customers, prospects or third parties only need to provide the personal data required to establish, perform and end the business relationship, or that there is a legal obligation to collect. Without this data, the conclusion of a contract or the provision of services will generally be refused.

No automated decision-making

As a rule, no solely automated decision-making within the meaning of Art. 22 GDPR is used to establish and conduct a business relationship. In individual cases, separate information is provided where legally required.

Contact

If you contact us, the data you provide is stored in order to answer your enquiry. The legal basis is our legitimate interest (Art. 6(1)(1)(f) GDPR) in answering enquiries addressed to us. The data is deleted or its processing restricted once storage is no longer necessary or where statutory retention obligations apply.

Hosting

This website is hosted on servers operated by Hostinger International Ltd. The servers are located in the EU. Hostinger processes technical data required to operate the website on our behalf, based on a data processing agreement pursuant to Art. 28 GDPR and our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). [PLACEHOLDER: existence/status of the data processing agreement (DPA) with Hostinger to be confirmed by the DPO]

Server log files

When you access our pages, the server automatically records data transmitted by your browser: IP address, date and time, the page requested, browser type and operating system. This data is used for secure operation and is not merged with other sources. The legal basis is Art. 6 (1) (f) GDPR.

Cookies and consent

We use technically necessary cookies so the website works; these cannot be deselected (Art. 6(1)(1)(f) GDPR). Any analytics beyond that is used only with your consent via our consent banner (Art. 6(1)(1)(a) GDPR). You can withdraw your consent at any time with effect for the future. [PLACEHOLDER: specific cookie list, purposes and retention to be added by the DPO]

Usage analytics (bdgSignal)

We use bdgSignal, our own tracking solution, to understand how this website is used. bdgSignal is loaded only after your explicit consent via the cookie banner (Art. 6 (1) (a) GDPR). No data is collected without consent. Processing takes place on bdg's own infrastructure (api.signal.bdg.io); data is not shared with third parties for advertising. You may withdraw your consent at any time with effect for the future. [PLACEHOLDER: specific data categories, retention and any cookies set to be confirmed by the DPO]

Appointment booking (Calendly)

We use Calendly for online appointment booking. The provider is Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. Calendly loads only when you actively click ‘Book a demo’ — not on page load. Data is then transferred to Calendly (including IP address, browser/device information and the booking details you enter such as name and email address), also to the USA; Calendly sets its own cookies. The legal basis is your consent, given by clicking (Art. 6(1)(1)(a) GDPR), which you can withdraw for the future by not opening the widget. The transfer to the USA is based on the EU Standard Contractual Clauses / the EU-US Data Privacy Framework. Further information in the provider’s privacy notice at https://calendly.com/legal/privacy-notice.

Taking part in the prize draw

If you take part in our prize draw at Jedox Elevate 2026, we process the data you provide: name, company, business email address and your estimate. The purpose is running the prize draw — determining and notifying the winner. The legal basis is your consent (Art. 6(1)(a) GDPR), given on submission and revocable at any time with future effect. Providing the data is voluntary; without it participation is not possible.

[PLACEHOLDER: retention period for entry data after the draw to be set by the DPO]

Sending the presentation slides

If you request the slides of our talk, we process your name and business email address in order to send you the material. The legal basis is your consent (Art. 6(1)(a) GDPR), revocable with future effect.

Contact about offers

Where you have additionally consented, we use your contact details to approach you about relevant offers. This consent is separate from participation and revocable at any time — withdrawing it does not affect the prize draw.

Where the form data goes

Data submitted via the forms on this page is stored in our own database (Supabase, servers in Frankfurt am Main, Germany). Access is configured so that the website can only create new entries — it cannot read or change existing ones. Entries are read internally only, to run the prize draw and to send the slides. Transmission happens on submission and does not depend on whether you consented to analytics. If you did consent, a contact is additionally created in our analytics and contact system bdgSignal (also EU). No transfer to third parties for advertising purposes takes place.