Top Security Standards for Sensitive Data: How Bosch BKK Modernizes Health Insurance Communication with starmate

GDPR-compliant, accessible email delivery to policyholders, connected to the BITMARCK core system, with no external data risks.

• Hosting: Data center in Germany (certified, not operated by starmate)
• Core system connection: BITMARCK 21c|ng
• Accessibility: BITV and WCAG

Health insurers operate in one of the most heavily regulated markets in Europe. The data involved is highly sensitive social data under Section 35 of the German Social Code I (SGB I), and supervisory authorities impose strict requirements.

• Data protection: Social data must not be stored or processed on insecure third-party servers
• Accessibility: Every mailing must comply with BITV (German accessibility ordinance) and WCAG
• Complex IT landscape: Connection to the core systems of statutory health insurance (BITMARCK 21c|ng)
• No way to address policyholders in line with their interests and in a legally compliant manner (e.g., about prevention courses or the pollen calendar)

starmate built a deeply integrated version of the EMS for Bosch BKK that anchors data protection and accessibility as core functions:

• Hosting in Germany: The EMS runs in a certified data center in Germany, coordinated with BITMARCK, the IT service provider for statutory health insurance. The data center is not operated by starmate.
• BITMARCK 21c|ng interface: An API interface synchronizes data with the core system's campaign management.
• Accessible templates: Drag-and-drop templates following BITV and WCAG standards, optimized for screen readers, with a logical reading order and dark mode support.
• Data protection workflows: Automated double opt-in, deletion and unsubscribe processes.

Bosch BKK communicates with policyholders in a targeted, privacy-compliant way.

• Legal certainty through encrypted data paths, sender authentication via DKIM and SPF, and fully documented consents
• Accessible service letters and newsletters following BITV standards
• Segmentation by interests based on GDPR-compliant profiling (e.g., invitations to preventive checkups or bonus programs)
• Relief for IT and marketing in data reconciliation and approval processes

“In healthcare, there are no compromises when it comes to data protection. starmate delivered a solution that natively meets our extremely strict security requirements and, at the same time, makes everyday work much easier for our editorial teams. Our policyholders receive accessible, precisely targeted information, GDPR-compliant and completely reliable.”

Jens Muschke, Project Lead, Bosch BKK

March 2026

Health insurance communication is not ordinary marketing. Our goal was a solution that not only meets regulatory requirements but combines them with good usability.

Thanks to server hosting in Germany in cooperation with BITMARCK and fully encrypted data bridges, sensitive social data stays where it belongs. Together, we also built accessible email templates following BITV and WCAG standards that work with screen readers and in dark mode.

Chris, Consulting