Privacy policy

01

Data controller

The controller responsible for processing data on this website within the meaning of the GDPR is:

02

General notes

Personal data means any information relating to an identified or identifiable natural person — such as name, address, e-mail addresses or user behaviour. Our processing of such data is always carried out in accordance with the GDPR and the German Federal Data Protection Act (BDSG). As a rule, this website can be used without providing personal data.

03

Hosting

Our website runs on servers located in Germany. Our infrastructure partner is Hetzner Online GmbH (Gunzenhausen); the CDN layer is provided by Cloudflare with EU routing. No data is transferred to third countries outside the EU. We have concluded data processing agreements pursuant to Art. 28 DSGVO with the providers used.

04

Collection and processing of personal data

4.1 Quote requests

When you contact us via our quote form (/en/quote), we process the data you submit (company, name, contact details, project details, and any uploaded bending lists or drawings) for the purpose of preparing a quote and initiating a contractual relationship. The legal basis is Art. 6 Abs. 1 lit. b DSGVO (pre-contractual measures). The data is retained until the contract is concluded or, if no contract is concluded, for a maximum of six months after the last contact, after which it is deleted unless statutory retention obligations require otherwise.

4.2 Contact form and e-mail

If you send us enquiries by e-mail or via contact forms, your information is stored for the purpose of processing the enquiry and in case of follow-up questions. The legal basis for processing is our legitimate interest in responding to your enquiry pursuant to Art. 6 Abs. 1 lit. f DSGVO, or Art. 6 Abs. 1 lit. b DSGVO if your enquiry is aimed at concluding a contract.

4.3 Customer area

Once our customer area is active, we will process login data (customer number or e-mail, password hash, session identifier) for authentication and for providing contract-related documents (delivery notes, mill certificates, invoices). The legal basis is Art. 6 Abs. 1 lit. b DSGVO.

05

Server log files

Each time our website is accessed, information is automatically stored in so-called server log files that your browser transmits. These are: anonymised IP address, date and time of the request, amount of data transferred, browser and operating system used. Storage takes place for reasons of operational security and to defend against attacks on the basis of Art. 6 Abs. 1 lit. f DSGVO. The log files are automatically deleted after 7 days at the latest.

06

Cookies

This website uses strictly necessary cookies only, for example to store your language selection. Third-party tracking or audience analytics do not take place. No cookies are set for marketing or analytics purposes. Consent is therefore not required (§ 25 Abs. 2 Nr. 2 TTDSG).

07

Fonts

We use the typefaces "Inter" and "JetBrains Mono", delivered via Bunny Fonts (fonts.bunny.net, operator BunnyWay d.o.o., Slovenia). Bunny Fonts is a GDPR-compliant alternative to Google Fonts: no identifiers are generated, no IP addresses are logged and no data is processed outside the EU. Google Fonts is not used.

08

External services

This website does not embed external map services directly. When you click "Get directions", we open Google Maps as an external link in a new tab. Only upon clicking the link does your browser establish a connection to Google; Google LLC's privacy policy then applies. Where map tiles are displayed on this website, they are served exclusively via our own server-side proxy (OpenStreetMap), so no IP address is transmitted to third parties.

09

Rights of data subjects

You have the right at any time to:

• Art. 15information about your stored personal data;
• Art. 16rectification of inaccurate data;
• Art. 17erasure of your data, provided no statutory retention obligations apply;
• Art. 18restriction of processing;
• Art. 20data portability;
• Art. 21objection to processing, where that processing is based on Art. 6 Abs. 1 lit. f DSGVO.

An informal message to info@baier-stahlhandel.de is sufficient to exercise your rights.

10

Right to complain

You have the right to complain to a data protection supervisory authority about our processing of your personal data. The competent authority for us is: