This policy describes how personal data is handled when using BSC Radio
Lab at radio-lab.bscgmbh.de. It is derived from the BSC
Shop's privacy policy and shortened by everything that does not apply
here — there is no shop, no orders, no payment, no shipping, no customer
account, and no newsletter. The section on usage statistics describes
the collection design actually implemented. This draft is not legal
advice; approval by BSC and by the data protection officer is still
pending before public deployment.
The controller within the meaning of the General Data Protection Regulation (GDPR) is BSC Computer GmbH, Tulpenstraße 4, 35108 Allendorf, Germany, phone +49 6452 9140-0, email info@bscgmbh.de. Further details in the legal notice.
For purely informational use, we only collect the data your browser transmits to the server (so-called server log files): the page accessed, date and time of access, the amount of data transferred, the referring source, the browser used, the operating system, and the IP address. Processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in the stability and functionality of the website. The data is not passed on or used for any other purpose. We reserve the right to review the log files retroactively if there are concrete indications of unlawful use.
The transmission is fully encrypted (TLS), recognizable by “https://” and the padlock symbol in the address bar.
The website is hosted by [BSC to confirm provider and address: ALL-INKL.COM – Neue Medien Münnich]. All data collected on the website is processed on the provider's servers in Germany. A data processing agreement exists with the provider [BSC to confirm that a data processing agreement exists with the host], ensuring the protection of the data and prohibiting unauthorized disclosure to third parties. No content delivery network is used; no data is transferred to a third country.
This website does not set any cookies and does not use any cookie-consent tool. No tracking pixels, web beacons, or comparable techniques are used.
That does not mean nothing is stored on your device, however: the application itself stores your recordings and settings locally in your browser. What that is, and why, is explained in the next section.
Recordings, analyses, simulations, workspaces, and settings are stored exclusively locally in your device's browser (IndexedDB and OPFS). They never leave your device; we have no access to them and can neither view nor delete them. You can remove them at any time via the application's own functions or via your browser's settings.
This local storage is strictly necessary for the service you have expressly requested: without it, there would be no recording to analyze, no workspace that still looks the way you left it the next time you open it, and no setting you would not have to re-enter every time you start the application. It is therefore exempt from consent requirements under § 25(2) no. 2 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz — the German law implementing the ePrivacy cookie-consent requirement; no official English version exists).
When an EnOcean radio stick is connected via the browser's Web Serial interface, communication with the device happens exclusively locally between the browser and the stick. The radio telegrams received are not transmitted to our servers. You grant the connection permission in the browser itself, and you can revoke it there at any time.
On startup, the application retrieves a static configuration file from our server to determine whether extended features are available. This request does not transmit any data about you; it merely appears like any other page request in the server log files described in Section 2.
BSC Radio Lab collects anonymous usage statistics so we can see whether and how the application is being used. It is a fixed part of the application, designed to work without a consent dialog because it stores no data on your device, reads no data from your device, and does not establish any link to a person.
| Field | Content |
|---|---|
| Event name | a name from a fixed, predefined list, e.g. “recording started” or “analysis template opened” |
| Count | how often the event occurred |
| App version | the version of the deployed application |
| Browser family | a rough category, e.g. “Chrome” |
| Language setting | a rough language setting, e.g. “en-US” |
| Session identifier | a random value that exists only in the memory of the open page |
localStorage, cookies, or
comparable device storage, and is lost when the page is closed or
reloaded.Because no information is stored on your device and none is read from your device, § 25 TDDDG does not apply, in our current assessment; in the absence of any link to a person, the GDPR is, in our current assessment, likewise not applicable. A brief information notice is nonetheless shown the first time the application is started.
The recorded usage events are kept for at most twelve months. Automated deletion after this period is being set up before the application is made publicly available; until then, deletion is performed manually. [BSC to confirm once automated deletion is in production, and to remove this sentence]
If you contact us by email, we process your details solely to handle and respond to your inquiry, and only to the extent necessary for that purpose. The legal basis is our legitimate interest in responding to your inquiry under Art. 6(1)(f) GDPR. Your data is deleted once the matter has been conclusively resolved and no statutory retention obligations apply.
You have the following rights against the controller: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), notification (Art. 19), data portability (Art. 20), withdrawal of consent given (Art. 7(3)), and lodging a complaint with a supervisory authority (Art. 77).
Right to object: Where we process your personal data on the basis of a balancing of interests under Art. 6(1)(f) GDPR, you have the right to object at any time, with effect for the future, for reasons arising from your particular situation. If you do so, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
Please send inquiries to info@bscgmbh.de [BSC to decide whether a dedicated privacy contact address should be provided].
The duration of storage depends on the applicable legal basis, the purpose of processing, and any relevant statutory retention periods. For usage statistics, the twelve-month period stated above applies. Server log files are deleted after [BSC to confirm the host's log file retention period]. Otherwise, we delete personal data as soon as it is no longer required for the purposes for which it was collected.
Last updated: 3 September 2026