Privacy

Controller

Provider

AWL Zentrum Ltd

Address

Basepoint Business Centre, Unit 34 John de Mierre House, RH16 1UA GB-West Sussex, United Kingdom

Registration

Companies House, Company Number 11973273

VAT identification number

GB323909011

Contact

info@awl-zentrum.de

The controller within the meaning of the General Data Protection Regulation (GDPR) is AWL Zentrum Ltd, named above. Tenderbold and the “AWL-Ausschreibungen” (AWL tenders) section on awl-zentrum.de are operated by the same controller; customer accounts, purchases, subscriptions and search alerts are managed jointly in a single system. Please send data protection enquiries to info@awl-zentrum.de.

Our representative in the European Union under Article 27 GDPR is AWL Zentrum SL, Psaje Peligros 3 1, Estepona, Spain (NIF B56531445). You may also contact the representative with any data protection question.

Accessing the website and hosting

When you access a page, your browser transmits technically necessary information (requested address, time, status code, amount of data transferred, browser type and IP address). This information is recorded in the hosting provider’s server log and serves the operation and security of the website. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the smooth and secure operation of the website).

The website is hosted by Vercel Inc. (USA). A data processing agreement is in place; the transfer to the USA is based on the European Commission’s Standard Contractual Clauses.

Cookies and local storage

The following are necessary and are set without consent: the cookie “tb_market” (selected country and language, only after you actively use the switcher, lifetime one year), the entry “tb_consent” in local storage (your choice in the cookie notice) and – only if you start a purchase or log in – the cookie “tb_kauf” (lifetime seven days), which links the purchase or login session to your customer account. The legal basis is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) in conjunction with Article 6(1)(b) and (f) GDPR.

All other cookies and storage entries for analytics purposes are only set after you have given your consent (see below). You can withdraw your consent at any time by deleting the stored entry in your browser; the notice will then appear again on your next visit.

Audience measurement with PostHog

We measure the use of tenderbold.com with PostHog (PostHog Inc., data processing on servers in the European Union, Frankfurt). We record pages viewed, clicks and form steps (without form content), referring page and campaign parameters, device type, browser and an approximate location derived from the IP address.

Without your consent, PostHog is not loaded and no data are transmitted to PostHog.

With your consent (“Accept all”), the site loads PostHog, which stores a random identifier in a cookie and in local storage in order to attribute returning visits and purchase processes over several days. The legal basis is your consent under § 25(1) TDDDG and Article 6(1)(a) GDPR. Session recordings are switched off.

You can withdraw your consent at any time with effect for the future by deleting the “tb_consent” entry in your browser or by visiting tenderbold.com once with the suffix “?noga=1”; neither PostHog nor Google Analytics will then be loaded. The data are deleted as soon as they are no longer required for analysis.

Google Analytics 4

Only if you choose “Accept all” in the cookie notice do we load Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics sets cookies and records pages viewed, events such as the start of a purchase, device, browser and a truncated IP address. A transfer to Google LLC in the USA is possible; it is based on the adequacy decision for the EU-US Data Privacy Framework.

The legal basis is your consent (§ 25(1) TDDDG, Article 6(1)(a) GDPR). Without consent, Google Analytics is not loaded. The data are deleted once the retention period configured in Google Analytics has expired.

Customer account and login

For purchases and the tender subscription, we maintain a customer account containing your email address, name, company, billing address, VAT identification number where applicable, password (stored only as a hash value), purchased unlocks and subscription status. It is the same customer account as in the “AWL-Ausschreibungen” section on awl-zentrum.de; you log in on both sites with the same credentials.

Account data are stored on servers of Hetzner Online GmbH in Germany. The legal basis is Article 6(1)(b) GDPR (contract) and point (c) (statutory retention obligations).

Purchase of an unlock and tender subscription

Payments are processed by Stripe. For direct sales to businesses with a valid EU VAT identification number, AWL is the seller; the payment service provider is Stripe Payments Europe Ltd. (Dublin, Ireland). In all other cases, the Link entity named in the Stripe Checkout is the seller and merchant of record and processes payment, billing, location, tax and transaction data as an independent controller in accordance with its own privacy notice.

To verify a VAT identification number, we query the European Commission’s VAT Information Exchange System (VIES). We receive from Stripe only the information required for matching the order, the unlock, invoicing, customer service, abuse prevention and statutory obligations; we do not receive card data.

The legal basis is Article 6(1)(b) GDPR (contract), point (c) (tax and commercial retention obligations, generally ten years for invoices) and point (f) (prevention of fraud and abuse).

Search alerts and emails

If you have set up a search alert, we store your email address, the selected service, the town or postcode and the radius, and send you new matching tenders by email. Every notification contains an unsubscribe link. Existing search alerts from the “AWL-Ausschreibungen” section continue unchanged; the links they contain lead to tenderbold.com.

We send purchase confirmations, access links, invoices, subscription confirmations and search alerts via the email service Mailjet (Sinch Mailjet SAS, Paris, France) as a processor. The legal basis is Article 6(1)(b) GDPR; for search alerts, your sign-up (point (a) or (b)).

Retrieval of tender data

The tenders displayed are retrieved server-side from our tender database and from the official sources. Your IP address and browser information are not passed on to these sources in the process.

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interests (Article 21). You may withdraw any consent given at any time with effect for the future (Article 7(3)). To do so, please contact info@awl-zentrum.de.

You also have the right to lodge a complaint with a data protection supervisory authority, usually the authority at your place of habitual residence.

Storage period

Server logs are kept only for as long as necessary for operation and security. We store account data for as long as the customer account exists; invoicing and accounting data until the statutory retention periods expire. We delete search alerts when you unsubscribe. The “tb_market” cookie expires after one year; you can delete all storage entries at any time in your browser settings.