We are pleased about your interest in and your visit to our website. Protecting your privacy is of the utmost importance to us. The following provisions provide detailed information about the collection, processing, and use of personal data gathered during your visit to our website at www.go-byont.com, how we handle this data, and the rights to which you are entitled.
I. Responsible party
The responsible party within the meaning of the GDPR and other national data protection laws of the EU member states as well as other data protection regulations is:
E-Mail: info@go-byont.com
Byont Eco B.V. (below "we“)
Tel.: +31 6 44743914
Haaksbergerstraat 67
Netherlands
7554 PA Hengelo
II. Data collected by us, purposes and legal bases of processing, as well as retention period
1. Visiting our website
When you use our website for informational purposes only, your internet browser automatically transmits certain information to our website server for technical reasons. This information is temporarily stored in so-called log files. The following data is collected automatically and stored until it is deleted automatically:
We process the aforementioned data for the following purposes: ensuring a smooth connection to the website, ensuring convenient use of the website, and evaluating system security and stability. The legal basis for this data processing is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes listed above.
Your IP address is automatically deleted or anonymized after you leave our website. The other information, which does not allow conclusions to be drawn about your person, is stored in log files for a somewhat longer period and then automatically deleted.
In addition, we use cookies from third-party providers on our websites. The specific cookies and services involved and how your data is processed in this context are explained in the following sections.
We use cookies and similar technologies (hereinafter collectively referred to as “cookies”) on our websites. Cookies are small data packets that contain certain information (e.g. the time of your server request, the operating system you use, the browser type, the previously visited website, and the IP address) and are stored in the web browser on the user’s device when visiting a website. When the corresponding server is accessed again, your browser sends the previously stored cookie back to the server.
a. Cookies
We use so-called session cookies on our websites. These store a session ID, which allows various requests from your browser to be assigned to the same session. This enables your device to be recognized when you return to our website. Session cookies are automatically deleted when you close your browser.
In addition, we also use persistent cookies that remain stored beyond a single session. These cookies are automatically deleted after a predefined period, depending on the type of cookie, ranging between 30 days and 24 months.
Necessary cookies
Some of the cookies we set are used to enable certain functions of our website (e.g. the cookie banner or saving your language preferences) or to ensure the security of the website. These are necessary cookies. These cookies are stored for up to one year.
Our website uses the cookie consent technology “Consent Studio” by Vallonic B.V. (Lange Nieuwstraat 172, 5041 DJ Tilburg, Netherlands) to obtain your consent for the storage of non-essential cookies in your browser and to document this in compliance with data protection regulations.
We also use the “Secure-ENID” cookie from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which is used to detect fraudulent activities on our website and to ensure the integrity of sessions. A transfer of personal data to Google in the United States cannot be ruled out. In cases where personal data is transferred to the United States, such transfer is carried out in accordance with Article 45 GDPR on the basis of the European Commission’s adequacy decision of 10 July 2023 (C (2023) 4745 final) on the EU-U.S. Data Privacy Framework. Google is certified under the EU-U.S. Data Privacy Framework.
We also use the “cfuvid” cookie from Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, USA) to ensure the security of our website. In this context, a transfer of personal data to the United States cannot be ruled out. In such cases, the transfer is carried out in accordance with Article 45 GDPR on the basis of the European Commission’s adequacy decision of 10 July 2023 (C (2023) 4745 final) on the EU-U.S. Data Privacy Framework. Cloudflare is certified under the EU-U.S. Data Privacy Framework.
The processing of cookies necessary for the proper operation of our website is based on Article 6(1) sentence 1 lit. f GDPR for the purposes of safeguarding our legitimate interests and Section 25(2) No. 2 TDDDG.
Non-essential cookies
Other cookies set by third-party services for analytics purposes (see also the section “Use of Web Analytics Tools”) help us understand how visitors interact with our websites. These cookies are used to collect statistical data on the use of our website and to evaluate this data for the purpose of optimizing our offerings. These cookies are non-essential cookies. Regarding their retention period, please refer to the information below regarding the respective service.
For all non-essential cookies, your data is processed based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. We request your consent via our cookie banner. There, you can specify whether and which non-essential cookies you wish to allow. You may revoke your consent at any time with future effect by adjusting the settings when you next access the cookie banner:
You can also disable the storage of cookies via your browser or configure your notify you as soon as cookies are sent. However, most internet browsers are set by default to automatically accept cookies.
b. Use of web analytics tools
We use web analytics tools on our websites. These tools enable us to track your behavior on our websites (clicking and scrolling patterns, time spent on our pages, the websites from which you arrived at our site, information about your browser and device, etc.). This helps us to understand how we can improve our websites to make them more user-friendly and efficient and to eliminate errors or weaknesses. The analysis also helps us to optimise our marketing activities. Analysis tools work by using cookies, which are stored in your device’s web browser for a certain period of time. Your IP address is also collected in this process but is usually only stored for a short period.
The legal basis for the processing of your data in connection with the use of web analytics services is your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. As explained in the ‘Cookies’ section, you are free to decide whether to consent to the use of the web analytics tools listed below (and the cookies used in connection with them) via the cookie banner, and you may also withdraw your consent at any time by changing the settings in the cookie banner accordingly. You may also choose to consent only to the use of individual services via the cookie banner. The web analytics services will only become active on our website once you have given your consent.
We use Google Analytics, a web analytics service provided by Google, on our website. For the European region, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services.
Google Analytics uses cookies and similar technologies, which are stored in your web browser for up to 24 months and enable an analysis of your use of our websites. The information generated is usually transmitted to Google’s servers and stored there for up to 14 months. In addition to your IP address, the information collected by Google includes, for example, your browsing behaviour on our websites (e.g. pages visited, time spent on site, clicks on external links, file downloads), approximate location (country, region, city), browser and device information (browser type, version, operating system, device model and screen resolution), and the source of your visit (i.e. the website via which you arrived at our website). The IP address is anonymised before storage.
The data is generally stored on servers within the EU but may also be transferred to and stored by Google USA (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). In cases where personal data is transferred to the USA, the transfer is carried out in accordance with Article 45 of the GDPR based on the EU Commission’s Adequacy Decision of 10 July 2023 (C(2023) 4745 final) on the EU-US Data Privacy Framework. Google USA is certified under the EU-US Data Privacy Framework.
We have entered into a data processing agreement with Google in accordance with Article 28 of the GDPR.
For further information, please see Google’s privacy policy at https://policies.google.com/privacy?hl=de.
Our website uses the web analytics service Microsoft Clarity. The data controller for customers in the EU is Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland).
Microsoft Clarity enables us to analyse user behaviour on our website (e.g. mouse movements, clicks, scrolling behaviour) in order to improve our offering. In this context, the “clck” cookie is set, which is stored for up to one year. This cookie stores a unique user ID to recognise users across multiple page views and to summarise their interactions.
The data is generally stored on servers within the EU but may also be transferred to and stored by Microsoft in the USA (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). In cases where personal data is transferred to the USA, the transfer is carried out in accordance with Article 45 of the GDPR based on the EU Commission’s Adequacy Decision of 10 July 2023 (C(2023) 4745 final) on the EU-US Data Privacy Framework. Microsoft is certified under the EU-US Data Privacy Framework.
We have entered into a data processing agreement with Microsoft Ireland Operations Limited in accordance with Article 28 of the GDPR.
For further information, please refer to Microsoft’s privacy statement at: https://www.microsoft.com/de-de/privacy/privacystatement.
When you contact us (e.g. via the contact form or by email), we process the data you provide in order to respond to your enquiry. The processing of the data you provide is based on your consent, which you have given by contacting us, in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future.
The personal data collected will be deleted immediately after your enquiry has been dealt with, unless it is required for other purposes, such as the initiation or performance of a contract with you or for other purposes.
Should we subsequently process the data for the purposes of entering into and performing a contract with you, this will be done on the basis of Article 6(1)(b) of the GDPR. Where we process data to fulfil our legal obligations (e.g. tax and commercial law retention obligations), this is done in accordance with Article 6(1)(c) of the GDPR, as well as to safeguard our legitimate interests in accordance with Article 6(1)(f) of the GDPR. Our legitimate interests may lie in the general maintenance of our business relationship, the analysis and evaluation of our business activities, and, where applicable, in the pursuit or defence of legal claims or the conduct of a sale or investment process relating to our company.
We generally store your data for as long as is necessary for the purposes stated. We store the data collected for the purpose of contract processing for the duration of the contractual relationship and, after the contract has ended, where applicable until the expiry of statutory or contractual warranty and guarantee rights and, where applicable, until the conclusion of any legal proceedings. Where we are obliged to store data for a longer period due to tax and commercial law retention and documentation obligations, storage shall take place for the periods specified by law (up to ten years).
If you are a prospective client based in Germany, we will forward your contact enquiry to our German company:
Byont Deutschland GmbH & Co. KG (nachfolgend „Byont DE“)
Kötterheide 14
49456 Lüsche
Tel.: +49 5438 95828-600
E-Mail: moin@go-byont.de
Byont DE is then solely responsible for the further processing of the data you provided in your contact enquiry. Byont DE processes your data in accordance with the conditions set out in Sections II.2 and III. You also have the rights set out in Section V in relation to Byont DE.
III. Recipients of your data
We may need to disclose your personal data to third parties. Naturally, any disclosure will be limited to what is strictly necessary. Depending on the nature of the data in question, the following categories of recipients may be involved:
IV. Transfers to third countries
Data may be transferred to third countries outside the EU/EEA. For further details, please refer to our explanations above regarding the relevant service (Cloudflare, Google, Microsoft).
V. Your data subject rights
If your personal data is being processed, you are a data subject within the meaning of the GDPR and you have the following rights towards the data controller:
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection legislation. The supervisory authority responsible for us is: the Autoriteit Persoonsgegevens, P.O. Box 93374, 2509 AJ The Hague, The Netherlands. Website: Autoriteit Persoonsgegevens
You have the right, in accordance with Article 15 of the GDPR, to obtain information about the personal data processed by the controller. Furthermore, pursuant to Article 16 of the GDPR, you have the right to have inaccurate data rectified and, where applicable, to have incomplete data completed. You also have the right, subject to the conditions set out in Article 17 of the GDPR, to have your personal data stored by the controller erased. Furthermore, subject to the conditions set out in Article 18 of the GDPR, you have the right to restrict the processing of your data. Furthermore, in accordance with Article 20 of the GDPR, you have the right to receive the personal data you have provided to the controller in a structured, commonly used, and machine-readable format or to request that it be transferred to another controller. You may also object to the processing of your data, provided the conditions set out in Article 21 of the GDPR are met. Where data processing is based on your consent, you may withdraw this consent in whole or in part at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. Your data will then be erased if there is no other legal basis for the processing. Under the conditions set out in Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing.
The supervisory authority responsible for Byont DE is: The State Data Protection Commissioner of Lower Saxony, Prinzenstraße 5, 30159 Hanover, telephone: +49 (0511) 120 45 00, email: poststel-le@lfd.niedersachsen.de.
VI. Security measures
For security reasons and to protect the transmission of confidential information, such as contact inquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock symbol in your browser bar. When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
VII. Further links
Our website contains hyperlinks to websites that are not operated by us. We do not monitor these websites. We are not responsible for the content of these websites, nor for their privacy policies or the way in which they handle data.
Last updated: July 2026