This privacy policy explains how personal data is processed when you visit this website, contact us for business purposes, enter into contracts or customer projects, or use the BeGaMo software.
1. Controller
BeGaMo GmbH
Industriestrasse 56
9491 Ruggell
Principality of Liechtenstein
Telephone: +41 78 219 01 96
Email: info@begamo.com
2. Website and hosting
When you access this website, technically necessary connection data is processed. This may include your IP address, date and time of access, the page or file requested, the amount of data transferred, referrer URL, browser, operating system and access status.
The processing serves to provide the website securely, reliably and without errors and to prevent and investigate misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes hosting data on our behalf. Log data is deleted or anonymised as soon as it is no longer required for the stated purposes, unless a security incident or legal obligation requires longer retention.
This website currently does not use cookies or comparable storage technologies.
3. Contact and business relationships
If you contact us by email or telephone, we process your contact details, the content of your message and any accompanying information required to handle it. This is done to process your enquiry, take steps prior to or perform a contract, and maintain business relationships.
The legal basis is Article 6(1)(b) GDPR where the data subject is personally a party to the contract or initiates pre-contractual measures. In other cases, processing is based on Article 6(1)(f) GDPR; our legitimate interest lies in efficient business communication. Article 6(1)(c) GDPR applies where statutory obligations must be fulfilled.
Providing the data is generally voluntary. Without the information required for processing, we may be unable to answer an enquiry or perform a contract.
4. B2B contact data from other sources
For business development purposes, we may process professional contact details of contact persons that we receive from their company, through referrals or from publicly accessible professional sources. This includes in particular name, company, function, business contact details and business correspondence.
The data is processed to assess and initiate potential business relationships and to maintain them on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in targeted business communication. Where contact constitutes direct marketing, we also comply with the applicable consent and objection requirements. You may object to the use of your data for direct marketing at any time.
To manage business contacts and business relationships, we use Odoo on our own server hosted by Hetzner Online GmbH in Germany. In the CRM, we store in particular names, companies, functions, business contact details, correspondence and contract- and project-related information. Processing is carried out for business initiation and relationship management, as well as for contract performance and documentation, on the basis of Article 6(1)(b), (c) or (f) GDPR, depending on the respective process.
5. Email and online meetings with Microsoft 365
For business emails and scheduled online meetings, we use Microsoft 365 and Microsoft Teams provided by Microsoft Ireland Operations Limited, Dublin, Ireland. Data processed may include contact details, account and device data, communication content, and connection and meeting data.
Processing is based on Article 6(1)(b) GDPR where it is necessary for pre-contractual or contractual measures involving the data subject, and otherwise on Article 6(1)(f) GDPR on the basis of our interest in efficient business communication. Meetings are recorded only after prior notice and on a separate legal basis.
According to the information displayed in the Microsoft 365 Admin Center, customer data at rest for the core services we use is stored in the EEA or Switzerland. Microsoft may use subprocessors and, in limited cases, process data outside this area. The transfer mechanisms used for this purpose are described by Microsoft in its current Products and Services Data Protection Addendum (DPA), available at https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.
6. Contracts, customer projects, software and partner services
In connection with contracts, customer projects and use of the Software, BeGaMo processes the necessary contact, contract, billing, user, support and project data, as well as data and documents provided by the Contracting Party where these contain personal data. Processing serves to initiate and perform contracts, manage users, provide and secure the Software, deliver services, communicate, invoice and document.
The legal bases are Article 6(1)(b) GDPR where the data subject is personally a party to the contract, Article 6(1)(c) GDPR for statutory obligations and Article 6(1)(f) GDPR for handling contracts with companies, system security, support and documentation. Our legitimate interest lies in the proper and secure management of the business relationship.
Where BeGaMo processes personal data exclusively on the instructions of a Contracting Party, that party is the controller and BeGaMo is the processor. In this case, processing is governed by the data processing agreement.
Where the contractual documents assign a service to an independent cooperation partner or third-party provider, the personal data required for that service is transferred to that provider. The recipient and its role are determined by the contractual documents.
7. Recipients and automated decision-making
Access is granted only to persons within BeGaMo, appointed processors, in particular for hosting, IT and communication, and independent service providers identified in the contract, insofar as this is necessary for their tasks. Further transfers take place only where there is an appropriate legal basis.
Automated decision-making, including profiling within the meaning of Article 22 GDPR, does not take place.
8. Retention
Personal data is stored only for as long as required by the respective purpose. Enquiry data is deleted after it has been processed unless it is needed for a business relationship or legal claims. Contract, billing and project data remains stored during the contractual term and thereafter in accordance with statutory retention and limitation periods. User accounts are deleted or anonymised after the end of the contract unless a retention or documentation obligation prevents this. In the case of processing on behalf of a controller, deletion or return is governed by the relevant agreement and statutory requirements.
9. Your rights
Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future.
Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time without giving reasons.
To exercise your rights, email info@begamo.com. You may also lodge a complaint with a data protection authority, in particular the Data Protection Authority of the Principality of Liechtenstein, Kirchstrasse 8, P.O. Box 684, 9490 Vaduz.
10. Security and updates
We take appropriate technical and organisational measures to protect personal data. This website is transmitted in encrypted form via HTTPS. We update this privacy policy when processing activities or legal requirements change.
Last updated: 18 September 2026