Privacy Policy

Privacy Policy

This privacy policy covers the website bauerlaubt.de. Everything behind app.bauerlaubt.de (the pre-check, your account, orders, and reports) is governed by a separate privacy policy that you will find inside the app.

1. Controller

The controllers responsible for data processing are:

Lukas Stoll and Arthigan Rajakumar, Rosenstraße 17, 74906 Bad Rappenau, Germany. Data-protection contact: hallo@bauerlaubt.de.

We are not legally required to appoint a Data Protection Officer and have not done so. You can raise any data-protection matter using the contact above.

2. Your rights

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17) and restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7 (3)).

You also have the right to lodge a complaint with a supervisory authority; for us that is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg. To exercise any right, contact hallo@bauerlaubt.de.

3. Data we process on the website

• Server log files: when you visit the site, our hosting provider records technical data such as IP address, browser and operating system, date and time, the page requested, and the referrer. This is needed to deliver and secure the site. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a stable, secure website). We keep these logs only briefly and then delete or anonymise them, unless a specific incident requires longer storage.
• Contact: if you write to us through the contact form or by email, we process the data you provide, such as name, email address, phone number, and message, to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR where it concerns a contractual or pre-contractual matter, otherwise Art. 6 (1) (f) GDPR. We delete the correspondence once it is dealt with and no retention period applies.
• Cookies and local storage: see section 5.

4. Reach measurement with Umami

We measure the use of our website with Umami, an analytics tool that we run ourselves on our own infrastructure in Germany. Umami is cookieless: it sets no cookies, builds no cross-device profiles, and does not track you across other websites. It records only aggregated data that cannot be traced directly to you, such as the pages visited, approximate origin at country level, device type, browser, and referrer.

Legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in a data-minimising analysis that helps us improve our content. You can object to this measurement at any time via the cookie notice on the website (opt-out); we then do not count your visit.

5. Cookies and local storage

The website uses only first-party storage that it needs to operate and to remember your own settings. We do not use advertising cookies or third-party tracking.

These entries are strictly necessary or functional and serve only your own settings. Legal basis: § 25 (2) TDDDG (strictly necessary, so no consent is required) and Art. 6 (1) (f) GDPR. See our Cookie Policy for details.

6. Hosting

The website runs on server infrastructure of IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany) in Germany. IONOS processes the data named in section 3 strictly on our behalf as a processor under a data-processing agreement (Art. 28 GDPR). Legal basis for using a host: Art. 6 (1) (f) GDPR.

7. The BauErlaubt app at app.bauerlaubt.de

This privacy policy covers only the website bauerlaubt.de. The actual pre-check, your account, orders, payments, and the download of your report all run at app.bauerlaubt.de. That processing is governed by its own, separate privacy policy with its own services, for example for payment handling. You will find it at app.bauerlaubt.de.

8. International transfers

We process data within the EU/EEA. Where a transfer to a third country is unavoidable, we rely on an adequacy decision (Art. 45 GDPR) or on appropriate safeguards such as the EU Standard Contractual Clauses (Art. 46 GDPR).

9. Automated decision-making

This website carries out no automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Art. 22 GDPR.

10. Changes

We update this notice when our processing changes. The current version and effective date are shown at the top of this page.

For details on the cookies we use, see our Cookie Policy.