Contact
Login

Privacy Policy

Thank you for your interest in our website. The protection of your personal data is important to us. Below, you will find information about how we handle the personal data collected through your use of our website.

As a rule, you can use the website without providing any personal data. However, if you wish to use services offered through our website, processing of your personal data may be necessary. Your data is processed in accordance with the applicable data protection laws. Where links to other websites are provided, we have neither influence over nor control of the linked content or the data protection policies applicable there. We recommend reviewing the privacy policies of the linked websites.

Contents

  • Contact details of the controller and the data protection officer
  • Definitions
  • Access to and storage of information on terminal equipment
  • Data processing when visiting the website
  • SSL/TLS encryption
  • Server log files
  • Cookies
  • Contacting us
  • Newsletter
  • Job applications
  • Social media links
  • Disclosure of data and recipients
  • Retention period for personal data
  • Your rights
  • External links
  • Legal obligations
  • Automated decision-making
  • Amendments to this Privacy Policy

Contact Details of the Controller and the Data Protection Officer

Controller within the meaning of the General Data Protection Regulation (GDPR)

Banauten GmbH
Schlosserstr. 2
70180 Stuttgart
Germany
Telephone: +49 (0)711 504 694 11
Email: hello@banauten.com

The controller alone or jointly with others determines the purposes and means of the processing of personal data.

Contact Details of the Data Protection Officer

Proliance GmbH
Proliance.ai
Leopoldstr. 21
80802 Munich
Email: datenschutzbeauftragter@proliance.ai

When contacting the Data Protection Officer, please include Banauten GmbH in the subject line. Please do not attach sensitive information, such as a copy of an identity document, to your inquiry.

Definitions

Our Privacy Policy is intended to be simple and easy for everyone to understand. As a rule, this Privacy Policy uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are set out in Article 4 of the GDPR.

Access to and Storage of Information on Terminal Equipment

By using our website, information (e.g. your IP address) may be accessed or information (e.g. cookies) may be stored on your terminal equipment. Such access or storage may involve further processing of personal data within the meaning of the GDPR.

Where such access to or storage of information is strictly necessary for the technically error-free provision of our services, it takes place on the basis of Section 25(1), sentence 1, and Section 25(2), no. 2 TDDDG.

Where such a process serves other purposes (e.g. adapting our website to users’ needs), it takes place on the basis of Section 25(1) TDDDG only with your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. The processing of your personal data is subject to the requirements of the GDPR and the Federal Data Protection Act (BDSG).

Further information about the processing of your personal data and the applicable legal bases in this regard can be found in the following sections on the specific processing activities on our website.

Data Processing When Visiting the Website

Description and Scope of Data Processing

When you access our website, our system automatically collects data and information from the computer system of the computer accessing the website. The following data are collected during an active connection:

  • Master data (e.g. name, address)
  • Contact details (e.g. email address, telephone number)
  • Content data (e.g. text entered)
  • Usage data (e.g. websites visited, access times)
  • Metadata/communication data (e.g. device information, IP addresses)

The data are also stored in our system’s log files. These data are not stored together with other personal data of the user.

Provision of the Website

We collect the above data to ensure the functionality of the website and to optimise it, to ensure the security of our information technology systems, and to integrate and display functions and content. The legal basis for processing the data is our legitimate interest pursuant to Article 6(1)(f) GDPR.After no more than seven days, the data are anonymised by truncating the IP address at domain level. The collection of data to provide the website and the storage of data in log files are strictly necessary for operating the website.

Webflow

We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit our website, Webflow collects various log files, including your IP address. Webflow stores cookies or other recognition technologies that are necessary for displaying the website, providing certain website functions and ensuring security (necessary cookies).

The use of Webflow is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Your personal data may also be processed by Webflow in the USA. Webflow is an active participant in the EU–US Data Privacy Framework and also uses Standard Contractual Clauses (Article 46(2) and (3) GDPR) to ensure a level of data protection corresponding to the GDPR. We have concluded a data processing agreement (DPA) with Webflow.

Amazon Cloudfront

We use the Amazon CloudFront content delivery network (CDN) from Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA (AWS), to improve the security and delivery speed of our website. When you visit our website, AWS collects various log files, including your anonymised IP addresses and cache metadata.

The use of the service is based on Article 6(1)(f) GDPR. We have a legitimate interest in delivering our content reliably and quickly. Where consent has been requested, processing is carried out solely on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Processing may take place in the USA; AWS is a participant in the EU–US Data Privacy Framework and uses Standard Contractual Clauses. We have concluded a data processing agreement with AWS pursuant to Article 28 GDPR.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL/TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https://” in your browser’s address bar and by the padlock icon in the browser bar.

Server-Log-Files

When you access our websites, data must be transmitted from your internet browser to our web server for technical reasons. The following data are recorded during an active connection for communication between your internet browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status
  • Web browser and operating system used
  • (Full) IP address of the requesting computer
  • Amount of data transferred

We collect the data listed above to ensure that the website connection is established smoothly and to enable users to use our website conveniently. The log file also serves to analyse system security and stability, as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Article 6(1)(f) GDPR.

For reasons of technical security, particularly to defend against attempted attacks on our web server, we store this data for a short period of time. We cannot identify individual persons based on this data. After no more than seven days, the data are anonymised by truncating the IP address at domain level, so that it is no longer possible to link them to an individual user. The data may also be processed in anonymised form for statistical purposes. At no time are these data stored together with other personal data of the user, matched against other datasets or disclosed to third parties.

Cookies

Our website uses so-called “cookies”. Cookies are small text files that are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted when you end your visit. Permanent cookies remain on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. language settings). Other cookies are used to analyse user behaviour or display advertising.

The processing of data through the use of strictly necessary cookies is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring the technically error-free provision of our services. The processing of personal data through the use of other cookies is based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to reject cookies in certain cases or altogether, and to enable the automatic deletion of cookies when you close your browser. Please note that disabling cookies may limit the functionality of our website.

You can withdraw or change your cookie settings at any time.

Contacting Us

If you contact us via the contact form or by email, we will store the information you provide in the enquiry form or your email, including the contact details you provide there, in order to process your enquiry and in case of follow-up questions. Providing an email address is required to process and respond to your enquiry; providing your name and telephone number is optional. We will never disclose your data to third parties without your consent.

The legal basis for processing the data is our legitimate interest in responding to your enquiry pursuant to Article 6(1)(f) GDPR and, where applicable, Article 6(1)(b) GDPR if your enquiry is aimed at entering into a contract. Your data will be deleted once your enquiry has been fully answered, provided that no statutory retention obligations prevent deletion. If processing is based on Article 6(1)(f) GDPR, you may object to the processing of your personal data at any time with effect for the future.

Newsletter

If you subscribe to our newsletter, we process the email address you provide in order to send you newsletters with information about our products, services, promotions and exclusive content. Subscribing is voluntary and free of charge.The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example by clicking the unsubscribe link in any newsletter or by emailing
hello@banauten.com
. The lawfulness of processing carried out before withdrawal remains unaffected.We use to send our newsletters. Your data will be stored for as long as you remain subscribed to the newsletter and will be deleted once you unsubscribe.

Social Media Links

Social networks (YouTube, Facebook, X (formerly Twitter), LinkedIn, Instagram and WhatsApp) are integrated into our website solely as links to the respective services. Only after you click an embedded text or image link are you redirected to the website of the relevant provider, and user information is transmitted to that provider. For information about how your personal data are handled, please refer to the privacy policies of the providers whose services you use.

Disclosure of Data and Recipients

Your personal data are not transferred to third parties, except where we have explicitly stated otherwise in the description of the relevant data processing; you have given your express consent pursuant to Article 6(1)(a) GDPR; disclosure is necessary pursuant to Article 6(1)(f) GDPR for the establishment, exercise or defence of legal claims; disclosure is required by law pursuant to Article 6(1)(c) GDPR; or disclosure is necessary pursuant to Article 6(1)(b) GDPR for the performance of contractual relationships with you.

In addition, we use carefully selected external service providers to provide our services (e.g. for web hosting, sending emails, and maintaining and servicing our IT systems). Where necessary, we have concluded data processing agreements with them pursuant to Article 28 GDPR. They are bound by our instructions and are regularly monitored by us.

Retention Period for Personal Data

The retention period for personal data is determined by the applicable statutory retention requirements, for example those arising under commercial and tax law. Once the relevant period has expired, the corresponding data are routinely deleted. Where data are required for the performance or initiation of a contract, or where we have a legitimate interest in retaining them, the data will be deleted once they are no longer required for these purposes or you exercise your right to withdraw consent or your right to object.

Your Rights

Below, you will find the rights you are entitled to exercise against the controller with regard to the processing of your personal data:

  1. The right to access the personal data concerning you that we process, pursuant to Article 15 GDPR.
  2. The right to have inaccurate personal data rectified or incomplete data held by us completed, pursuant to Article 16 GDPR.
  3. The right to have personal data held by us erased, pursuant to Article 17 GDPR, unless statutory exceptions apply.
  4. The right to restriction of processing, pursuant to Article 18 GDPR.
  5. The right to be notified, pursuant to Article 19 GDPR.
  6. The right to data portability, pursuant to Article 20 GDPR.
  7. The right to lodge a complaint with a supervisory authority, pursuant to Article 77 GDPR.
  8. The right to withdraw consent you have given, with effect for the future, pursuant to Article 7(3) GDPR.

Competent supervisory authority:
‍The State Commissioner for Data Protection and Freedom of Information
‍
Lautenschlagerstraße 20
70173 Stuttgart
Germany
‍
Telephone: +49 (0)711 615 541-0
Email: poststelle@lfdi.bwl.de

Right to Object

If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object to the processing on grounds relating to your particular situation. If your objection concerns processing for direct marketing purposes, you have a general right to object.

To exercise your right to withdraw consent or your right to object, simply email us at hello@banauten.com.

External Links

Where links to other websites are provided, we have no influence over or control of the linked content or the privacy policies applicable there. When visiting linked websites, we recommend reviewing their privacy policies to determine whether, and to what extent, personal data are collected, processed, used or made accessible to third parties.

Statutory Obligations

Providing personal data for a decision on entering into a contract, performing a contract or taking steps prior to entering into a contract is voluntary. However, we can only make a decision in the context of contractual processes if you provide the personal data required for entering into or performing the contract, or for taking pre-contractual steps.

Automated Decision-Making

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place.

Amendments to This Privacy Policy

We reserve the right to update this Privacy Policy as necessary, in compliance with the applicable data protection regulations. This enables us to adapt it to current legal requirements and reflect changes to our services, for example when introducing new services. The version in force at the time of your visit applies.