Skip to content
shopbauer

Privacy policy

Information on the processing of personal data under the General Data Protection Regulation (GDPR). This English version is a translation for your convenience. Where the texts differ, only the German version is legally binding.

Last updated 10 October 2026

1. Controller

The controller within the meaning of the GDPR for data processing on this website is:

Mark Kroter
shopbauer
Kastanienweg 13D
64807 Dieburg
Germany
Phone
+49 1627911261
Email
kontakt@dershopbauer.de

2. Visiting this website

When you simply visit this website, our server only processes the data that your browser transmits automatically and that is technically required to display the page to you (so-called server log files):

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical operation, stability and security of the website. The data is not combined with other data sources and is not used to create user profiles.

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file requested
  • Amount of data transferred and status of the request
  • Browser used, including version, and operating system
  • Where applicable, the previously visited page (referrer)

3. Hosting

This website runs on a server operated by us, provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland, in a data centre in Germany. The log files are not passed on to third parties. We do not use a content delivery network.

4. Encryption

For security reasons, this website uses TLS encryption. You can tell that a page is transmitted in encrypted form by the padlock symbol in your browser and by the address bar starting with “https://”.

5. Cookies and visit counting

This website does not set any cookies and does not embed any analytics, advertising or tracking services of third parties. The contact form works without them as well. There is therefore no cookie banner and no consent to cookies that you would need to give or withdraw.

We count page views with Plausible Analytics. The software runs on our own server in Germany. No data is passed on to an analytics company, and none of it leaves our systems.

Plausible works without cookies and stores nothing on your device. It does not recognise you across websites and does not create profiles. Your IP address is not stored: together with the day and the domain it is turned into a checksum that cannot be reversed and changes daily. This is just enough to tell a repeated view within one day from a new visit.

We record the page viewed, the referring website, browser, operating system, device type and the country derived from the IP address.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to know in aggregate how our pages are used. As nothing is stored on or read from your device, § 25(1) TDDDG does not apply and no consent is required. The counting script is delivered from our own domain, and the data stays on our own server.

If you use the light and dark mode switch, your choice is stored in the local storage (localStorage) of your browser. This setting does not leave your device and is not read by us. You can delete it at any time in your browser settings.

6. Fonts

The fonts used are served from our own server. No connection is made to Google Fonts or any other external provider, and no IP address is transmitted to third parties.

7. Contact form

This website offers a contact form. If you submit it, we process the following details exclusively to handle and answer your enquiry:

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give expressly before submitting the form. You can withdraw it at any time with effect for the future; an informal message to us is sufficient. If your enquiry is aimed at concluding or performing a contract, the processing is additionally based on Art. 6(1)(b) GDPR.

The details are stored on our server in Germany. We also file them there in a self-hosted ticket system (Chatwoot) so that we can answer your enquiry in an orderly way. Both run on the same server. The data is not passed on to third parties, and no emails are sent via external providers.

The form contains a field that is invisible to you and serves to detect automated submissions. If it is filled in, we discard the message without storing it.

We delete your enquiry once it has been fully dealt with and no statutory retention obligations prevent deletion.

  • Name
  • Company (optional)
  • Email address
  • Phone number (optional)
  • Country
  • Preferred language for our reply
  • Topic of your enquiry (service or package)
  • Your message
  • Your consent to this processing
  • Automatically: the language of the page and the page from which you sent the form

8. Contact by email or phone

If you contact us by email or phone instead, we likewise process your details exclusively to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in answering enquiries.

9. WhatsApp

This website contains links to a WhatsApp chat. These are simple links: only when you click one of them does your device connect to WhatsApp. Merely visiting our website does not transmit any data to WhatsApp.

The service is operated by WhatsApp Ireland Limited, Merrion Road, Ballsbridge, Dublin 4, Ireland. The operator is responsible for processing your data within WhatsApp, and its privacy policy applies. If you do not want this, please use email or phone instead.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR) with respect to us.

Right to object: Where we process data on the basis of a legitimate interest under Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority of your habitual residence or of our registered office is responsible.

11. Storage period

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations.

We do not keep server log files permanently: they are rotated continuously and automatically overwritten once a limited volume is reached. These data are not evaluated beyond technical operation.