Privacy Policy

Thank you for visiting our website. Compliance with the data protection legislation is especially important for us. The aim of this Privacy Policy is to make you, as the user, aware of the type, scope and purpose of the personal data processing and the rights you have, in as far as you are considered the data subject, as defined in Art. 4, No. 1 of the General Data Protection Regulation. The following Privacy Policy takes account of the amendments to the General Data Protection Regulation (GDPR) that applies from 25 May 2018. At the same time, the Policy also meets the requirements of Section 13 of the Telemedia Act (Telemediengesetz).

1. Responsible authority

This website, including its range of services, is operated by

Bültbek 32-38
22962 Siek Germany

Tel.: +49 4107 901220

Managing Director: Mr Jörn Stock

2. General information

We have developed the website so as to obtain as little data about you as possible. It is possible, in principle, to visit our website without providing any personal data. The processing of personal data is not required until you decide to make use of certain services (e.g. the contact form). In this regard, we always ensure that your personal data are processed in compliance with a legal basis or the consent that you have given. We comply with the provisions of the General Data Protection Regulation (GDPR), which applies from 25 May 2018, and the currently applicable national regulations, such as the Federal Data Protection Act (Bundesdatenschutzgesetz) or other special laws on data protection.

3. Definition

The terms used in this privacy policy have the following meanings, as defined in the GDPR.

“Personal Data” means all information relating to an identified or identifiable natural person (hereinafter “Data Subject”); a natural person is considered to be identifiable if this person can be directly or indirectly identified, in particular by means of association with an identifier such as a name, an identification number, information on location, online identification data or with one or more special characteristics, which are an expression of the physical, physiological, psychological, financial, cultural or social identity of this natural person;

“Processing” refers to each process carried out with or without the assistance of automated procedures, or each such series of processes in connection with personal data such as the collection, capture, organisation, arrangement, storage, adjustment or amendment, selection, retrieval, use, disclosure by transmission, distribution or other form of provision, matching or linking, restriction, deletion or destruction;

“Limitation of the Processing” is the labelling of stored personal data for the purpose of limiting their future processing;

“Pseudonymisation” is the processing of personal data in such a way that the personal data can no longer be assigned to a particular Data Subject without the need for additional information, provided that such additional information is kept separate and is subject to technical and organisational measures, which ensure that the personal data cannot be assigned to an identified or identifiable natural person;

“Responsible Party” is a natural or legal person, authority, institution or another office, which makes decisions alone or jointly with others on the purposes and means of processing of personal data; if the purposes and means of this processing are specified by EU law or the laws of the member states, the Responsible Party or the specific criteria for designating a Responsible Party may be stipulated by EU law or the laws of the member states;

“Processor” is a natural or legal person, authority, institution or other office that processes personal data on behalf of the Responsible Party;

“Recipient” is a natural or legal person, authority, institution or other office to which personal data are disclosed, regardless of whether or not this is a third party. Authorities that may receive personal data in the context of a specific investigation mandate in accordance with EU law or the law of the member states but are not deemed to be Recipients; the processing of data by these authorities is carried out in accordance with the applicable data protection regulations for the purposes of the processing;

“Third Party” refers to a natural or legal person, authority, facility or other office, except for the Data Subject, the Responsible Party, the Processor and the persons authorised, under the direct responsibility of the Responsible Party or the Processor, to process the personal data;

“Consent” of the Data Subject is any freely given, specific, informed and unambiguous statement of intent in the form of a declaration or another unambiguous affirming action by which the Data Subject intimates that he/she agrees to the processing of the personal data in question in the particular case;

4. Consent

We sometimes collect certain personal data from your visit to the website for which we need your consent. This happens, for example, when you use our contact form to send us a message or request service updates regarding our products.

Declaration of consent

By using the forms we make available to you, you give your consent for us to collect the personal data you provide and to process the data as described in this privacy policy. You may withdraw this consent for the future at any time by providing us with a declaration to this effect. We would advise you, however, that the use of our services without your consent will no longer be possible. If you wish to withdraw your consent, please use the methods of contact mentioned above (in such case, please state your name, e-mail and postal address).

5. Purpose of use and legal basis of the personal data processing

We process personal data that are required for the purpose, implementation or settlement of the service offer on the basis of Art. 6, Para. 1(b) of the GDPR. Should we employ external service providers for contract data processing, the processing is carried out on the legal basis of Art 28 of the GDPR.

The personal data are collected, processed and used by us exclusively for the following purposes:

Purpose of the data processing

​Legal basis for the data processing (“Why the data processing is necessary”)

for contact purposes and hence coherent correspondence

on the basis of your consent

for processing your case and providing you with further advice, if you request this

on the basis of your consent

for sending service updates

on the basis of your consent

for processing your product enquiry

on the basis of pre-contract measures at the request of the Data Subject

to ensure that our website is presented to you in the most effective and interesting way possible (e.g. through anonymised evaluation)

on the grounds of legitimate interests

for the technical realisation of our offers

on the grounds of legitimate interests

6. Collected and processed personal data

We only collect and process your personal data if you make them available to us with your knowledge, e.g. by filling out forms or sending e-mails.

The data collected on forms we make available are the following:

Data for general contact:
  • Name*
  • Company
  • E-mail address*
  • Subject*
  • Message
  • Origin of contact
  • Security prompt*

data for product enquiries:

  • Machine*
  • Name in full*
  • Company
  • E-mail address*
  • Telephone
  • Message
  • Security prompt*
* denotes compulsory fields

The personal data you make available and their contents remain exclusively with us and our associated businesses. We will only save and process your data for the purposes stated in Item 5. Any usage over and above the purpose indicated requires your explicit consent. The same applies to the transfer and disclosure of your data to a third party.

7. General log files

Connection data of the enquiring computer (IP address), the pages you visit on our website, the date and duration of the visit, the identification data of the type of browser and operating system used, and also the website from which you visit us as well as the successful retrieval in log files are collected from the website. The technical administration of the website and anonymous statistical collections enable an assessment to be made of the accesses to the offer of STOCK - B.I.G. GmbH as well as an assessment for the purpose of enhancing data protection and data security in our company, in order ultimately to ensure an optimal level of protection for the personal data processed by us.

The data from the server’s log files are stored separately from all personal data provided by you. Subject to any legal obligations for storage, we delete or anonymise your IP address after you leave our website.

8. Cookies

Use of Cookies

Information is collected and stored on our website by the use of so-called browser cookies.

What are cookies?

These are small text data that are saved on your data carrier and that store certain settings and data for exchange with our system over your browser. A cookie usually contains the name of the domain from which the cookie data were sent, as well as information about the age of the cookie and an alpha-numerical identifier.

Why do we use cookies?

Cookies allow our systems to recognise the user’s device and to make any defaults available immediately. A cookie is transferred to the hard drive of a user’s computer as soon as the user accesses the platform. Cookies help us to improve our website and to be able to offer you a better service that is more tailor-made for you. They enable us to recognise your computer or your (mobile) device, when you return to our website and thereby:

  • to store information about your preferred activities on the website and hence to adapt our website to your individual interests.

  • to speed up the processing of your enquiries.

We work together with services of third-parties who support us in making the internet range and the website more interesting for you. For this reason, cookies from these partner companies (third-party providers) are also saved onto your hard drive when you visit the website. These are cookies that are erased automatically after the time specified.

A list of the cookies we place is included in the following table:

Cookie name

first mover cookies or third-party provider cookies?

If third-party provider cookie: Who is the initiator?


Standard expiration time



Differentiates user and sessions

2 years



Is used to keep the request rate in check

1 minute



Differentiates user and sessions

24 hours



This cookie is used by Google Analytics to monitor

the request rate at the company's servers

10 minutes



Saves the variation of a page, or an element

that the user has retrievedt

Is erased when the browser is closed down



Confirmation of the Cookie Notice

1 year

Can I decide on the use of the cookies?

If you do not want browser cookies to be used, you may select browser settings that do no allow cookies to be stored. Please be aware that, should you do so, you will only be able to use our website to a limited extent or not at all. If you only wish to accept our own cookies and not those of our service providers and partners, you may select the setting “Block cookies of third-party providers” in your browser. We accept no liability for the use of third-party cookies.

9. Integration of services and contents of third parties

Our website uses the contents and services of other providers. These are, for example, services that help us to make the website more interesting. To enable these data to be retrieved and presented in the user’s browser, the transfer of the IP address is compulsory. The provider (referred to below as “third-party provider”) therefore recognises the IP address of the current user.

Although we endeavour only to use third-party providers that only need the IP address to be able to deliver contents, we have no influence on whether the IP address may possibly be stored. In this case, this process serves statistical purposes, among other things.

Should we become aware that the IP address is saved, we will inform you of this.

Use of Google Analytics

Our website uses the functionality of the web analysis tool Google Analytics. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies”. These are small text files that your web browser saves onto your end device and which enable an analysis to be made of the use of the website. By means of cookies, information generated by your use of our website is forwarded to a server of Google and saved there. The location of the server is normally the USA.

Google Analytics cookies are stored on the basis of Article 6, Para. 1(f) of the GDPR. As operator of this website, we have a legitimate interest in the analysis of the user behaviour for the purpose of optimising our website and advertising.

We use Google Analytics in connection with the IP anonymisation functionality. This ensures that your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. There may be exceptional cases, where Google transfers the full IP address to a server in the USA and truncates it there. Google will use this information on our behalf to evaluate your use of the website, compile reports on the website activities and to provide us with further services associated with the use of the website and the internet. The IP address transmitted by Google Analytics is not merged with other data of Google

The storage of cookies by your web browser can be prevented. This may, however, limit some functions of our website. You may still prevent the collection of data on your website usage, including your IP address together with subsequent processing by Google. You can do this by downloading and installing the browser plugin, accessible by clicking on the following link:

Details of the handling of user data by Google Analytics can be found in Google’s Privacy Policy at:

We have entered into a contract with Google on the contracted processing to ensure full compliance with the legal data protection provisions.

Our website uses the Google Analytics “demographics feature” function. This allows reports to be produced that contain statements on the age, gender and interests of the web page visitors.
These data originate from interest-based advertising by Google as well as visitor data by third-party providers. It is not possible to assign the data to a particular person. You can deactivate this function at any time. You can do this via the ad settings in your Google account, or by generally prohibiting the collection of your data by Google Analytics as outlined in the section “Objection to Data Collection”.

Alternatively, you can also suppress capture by Google Analytics by placing a so-called "opt-out cookie" by clicking HERE. If you delete the cookies in your browser, you will need to click on this link again.
You can find Google’s Privacy Policy at:

10. Data security

The transfer of information over the Internet is, unfortunately, never 100% secure, which is why we are unable to guarantee the data transferred to our website over the Internet.

We take technical and organisational measures, however, to protect our website against the loss, destruction, access, modification or dissemination of your data by unauthorised persons.

In particular, we transmit your data encrypted. For this purpose, we use the SSL/TLS (Secure Sockets Layer/ Transport Layer Security) coding system. Our security measures are revised continuously in line with technological development.

11. Rights of the Data Subject

If you are a data subject as defined by Art. 4, No. 1 of the GDPR, you have the following rights in respect of the processing of your personal data in accordance with the GDPR. The legal text of the rights listed below can be found at

Right to confirmation and information

Subject to the conditions of Art. 15 of the GDPR, you have the right to request confirmation of whether personal data about you will be processed and to obtain information about the personal data stored about you and a copy of this information from the Party Responsible for the processing at any time and at no cost.

Right to rectification

Subject to the conditions of Art. 16 of the GDPR, you have the right to request that any incorrect personal data relating to you be corrected immediately. Having regard to the purposes of the processing, you also have the right to request the completion of incomplete personal data, also by means of a supplementary declaration.

Right to erasure

Subject to the conditions of Art. 17 of the GDPR, you have the right to request the deletion of any personal data relating to you if one of the grounds referred to in Art. 17 of the GDPR applies and if the processing is not necessary.

Right to restriction of processing

Subject to the conditions of Art. 18 of the GDPR, you have the right to request that the processing be restricted if one of the grounds referred to in Art. 18 of the GDPR applies.

Right to data portability

Subject to the conditions of Art. 20 of the GDPR, you have the right to obtain the personal data that you have provided to us, in a structured, conventional and machine-readable format; and you have the right to transfer these data to another Responsible Party without hindrance from us, provided that the further conditions of Art. 20 of the GDPR apply.

Right to withdraw consent

You have the right to withdraw your consent to the processing of your personal data at any time with future effect. Please use the contact information given above to withdraw your consent.

Right to object

Subject to the conditions of Art. 21 of the GDPR, you have the right to object to the processing of any personal data relating to you. If there are conditions for an objection to take effect, no further processing may be carried out by us.

Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you contravenes the provisions of the GDPR.

12. Disclosure of your personal data

Your personal data may be disclosed as described below.

The hosting of the website is carried out by an external service provider in Germany. For this purpose we ensure that the data processing is only carried out in Germany. This is required for the operation of the website, as well as for the grounds, implementation and execution of the existing user contract, and is also possible without your consent.

Data may also be disclosed when we are entitled or obliged to disclose the data on the basis of legal provisions and/or an order by the authorities or a court ruling. This may in particular be a matter of the provision of information for the purpose of criminal prosecution, emergency response or the enforcement of intellectual property rights.

If your data are disclosed to service providers to the required extent, these will only have access to your personal data in the extent that is necessary for the completion of their tasks. These service providers are obliged to process your personal data in accordance with the applicable laws on data protection, in particular the GDPR.

We categorically do not disclose your data to third parties without your consent other than in the aforementioned circumstances. In particular, we do not disclose any personal data to a body in a third country or an international organisation.

13. Duration of storage of your personal data

As regards the duration of storage, we delete your personal data as soon as their storage ceases to be necessary for the fulfilment of the original purpose and there are no further periods of storage required by law. The periods of storage required by law form the criterion for the final duration of the storage of personal data. The data are routinely deleted at the end of the period of storage. If a period of storage applies, the processing will be restricted in that the data will be blocked.

14. References and links

If Internet pages are viewed that make reference to our website, information such as name, address, e-mail address, browser features, etc. may be requested again. This Privacy Policy does not regulate the collection, disclosure or the management of personal data by third parties.

Third-party service providers may have their own, different regulations for managing the collection, processing and use of personal data. You are therefore advised to familiarise yourself with the practice of third parties handling personal data before providing personal data on their websites.

15. Amendment to the privacy policy

We develop our website on an ongoing basis, so that we are able to provide you with a constantly improving service. We will keep this Privacy Policy up to date and make the appropriate adjustments, when and if the need arises.

We will, of course, keep you informed promptly of any amendments to this Privacy Policy. We will do this by sending you an e-mail to the e-mail address you have given us. Should your further consent to our handling of your data become necessary, we will of course obtain this from you before the amendments take effect.

You can retrieve the current version of our data protection regulations from the Internet at any time at LINK.

16. Data Protection Officer

Should you have any queries regarding data protection law, please contact our Data Protection Officer.

Herold Unternehmensberatung GmbH

Mr Philipp Herold
Hafenstraße 1a
23568 Lübeck


As of: July 2021