DATA PROTECTION

Data protection information

Status November 2024

​

Thank you for visiting our website baitbau.de and for your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practice is in accordance with the statutory regulations. The following privacy policy serves to fulfill the information obligations arising from the GDPR.

 

1 Data controller

The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the controller is

Bait Bau GmbH

Waitzstraße 26

10629 Berlin
Germany
E-mail: info@baitbau.de  
Phone: +49 173 2025885

​

​

2 provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the device accessing it (e.g. computer, cell phone, tablet, etc.).

  2.1 What personal data is collected and to what extent is it processed?

- Information about the browser type and version used;

- The operating system of the accessing device;

- Host name of the accessing computer;

- The IP address of the accessing device;

- Date and time of access;
- Websites and resources (images, files, other page content) that were accessed on our website;

- Websites from which the user's system came to our website (referrer tracking);

- Notification of whether the retrieval was successful;

- Amount of data transferred

This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.

​

  2.2 Legal basis for the processing of personal data

Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

​​​

  2.3 Purpose of data processing

The temporary (automated) storage of data is necessary for the course of a website visit in order to enable the provision of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshooting. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website.

​

  2.4 Duration of storage

The aforementioned technical data is deleted as soon as it is no longer required in order to ensure the compatibility of the website for all visitors.

 

3 Special functions of the website
Our website offers you various functions that collect, process and store personal data when you use them. We explain below what happens to this data:

​

3.1 Contact form

What personal data is collected and to what extent is it processed?

We will process the data you enter in our contact forms, which you have entered in the input mask of the contact form, to fulfill the purpose stated below.

​

 Legal basis for the processing of personal data

Art. 6 para. 1 lit. a GDPR (consent by clear affirmative action or behavior)

​

 Purpose of the data processing

We will only use the data collected via our contact form or via our contact forms to process the specific contact request received via the contact form.

Duration of storage
Once your inquiry has been processed, the data collected will be deleted immediately, provided there are no statutory retention periods.

​

 Revocation and deletion options

The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this privacy policy.

Necessity of providing personal data

The use of the contact forms is voluntary and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you wish to use our contact form, you must complete the fields marked as mandatory. If you do not fill in the required information on the contact form, you will either not be able to send the request or we will unfortunately not be able to process your request.

​

 

4. integration of external web services and processing of data outside the EU
We use active content from external providers, so-called web services, on our website. By accessing our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU.

We use the following external web service:

​

  4.1 LinkedIn

We currently link to LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”) by means of a corresponding social media button. In order to prevent unwanted transmission of your usage data (e.g. address of the page you are currently visiting) to this service, you will only reach LinkedIn by clicking on the link. LinkedIn may collect usage and user data on the service page. We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. To our knowledge, your browser only establishes a connection with the LinkedIn servers when you click on the link. As a result, the information that you have visited our website is indirectly (referrer) forwarded to LinkedIn.
For the purpose and scope of data collection by LinkedIn and the further processing and use of your data there, as well as your rights in this regard and setting options for protecting your privacy, please refer to LinkedIn's privacy policy. (https://de.linkedin.com/legal/privacy-policy)

​

Legal basis for the processing of personal data

​

Art. 6 para. 1 lit. a GDPR (if you have registered with “LinkedIn”) and Art. 6 para. 1 lit. f GDPR (if you have not registered with LinkedIn). Insofar as processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, the legitimate interest of the site operator is to enable users to interact with the site operator's content on LinkedIn.

Purpose of the data processing

The primary purpose of data collection is to offer you a social interaction option linked to LinkedIn and thus to make our website interactive.

​

  4.2 wix.com

We use the wix.com service of the company Wix.com Ltd, Namal 40, 6350671 Tel Aviv, Israel on our website. Data is also transferred to a third country outside the EU. An adequacy decision by the Commission exists for this third country.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.

​

 Purpose of the data processing

The service is a plugin that we need to be able to show you all the content on our website. The service may also be used for tracking and/or advertising integration. Further information on the handling of the transferred data can be found in the provider's privacy policy at https://de.wix.com/about/privacy.

​

 

5 Data security and data protection, communication by email

Your personal data is protected by technical and organizational measures during collection, storage and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.

 

 

6 Rights of data subjects

  6.1 Right to information

You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have a right to information about the information specified in Art. 15 para. 1 GDPR. We will also be happy to provide you with a copy of the data.

​

  6.2 Right to rectification

In accordance with Art. 16 GDPR, you have the right to have any incorrect personal data stored by us corrected at any time. You can also request the completion of the data stored by us at any time.

​

  6.3 Right to erasure

In accordance with Art. 17 para. 1 GDPR, you have the right to demand that we erase the personal data we have collected about you if
- the data is either no longer required;

- the legal basis for the processing no longer applies due to the withdrawal of your consent;

- you have objected to the processing and there are no legitimate grounds for the processing;

your data is being processed unlawfully;

- a legal obligation requires this or a collection pursuant to Art. 8 para. 1 GDPR has taken place.

​

According to Art. 17 para. 3 GDPR, the right does not exist if

- the processing is necessary for exercising the right of freedom of expression and information;

- your data has been collected on the basis of a legal obligation;

- the processing is necessary for reasons of public interest; the data is necessary for the establishment, exercise or defense of legal claims.

​

  6.4 Right to restriction of processing

Pursuant to Art. 18 (1) GDPR, you have the right in individual cases to request the restriction of the processing of your personal data.

This is the case if

- the accuracy of the personal data is contested by you

 

- the processing is unlawful and you do not consent to its erasure
- the data is no longer required for the purpose of processing, but the data collected is used for the establishment, exercise or defense of legal claims;
an objection to the processing pursuant to Art. 21 para. 1 GDPR has been lodged and it is still unclear which interests prevail.

 

  6.5 Right of revocation

 

If you have given us your express consent to the processing of your personal data (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke this at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

​

  6.6 Right to object

In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 para. 1 lit. f (in the context of a legitimate interest).

​

  6.7 How do you exercise your rights?

You can exercise your rights at any time by contacting us using the contact details below:

Bait Bau GmbH
Marburger Street 17
10798 Berlin
Berlin, Germany
E-mail: info@baitbau.de  
Phone: +49 173 2025885

7. right to data portability

In accordance with Art. 20 GDPR, you have the right to the transfer of personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format.

​

8. right to lodge a complaint with the supervisory authority pursuant to Art. 77 para. 1 GDPR

If you suspect that your data is being processed unlawfully on our website, you can contact a supervisory authority at any time. You have the right to lodge a complaint pursuant to Art. 77 GDPR in the EU Member State of your habitual residence, place of work and/or place of the alleged infringement.