We are pleased about your visit on our website. First of all, we would like to introduce ourselves to you as the responsible body in terms of data protection law:
Bata Baumann & Heydeck GbR
Phone: +49 30 39 87 91 19
In accordance with our legal obligations, we would like to inform you about the collection and use of your personal data.
When you use our website, personal information about you is collected. This can be done by entering the data yourself – e.g. your e-mail address. However, our system also collects data from you automatically, such as your visit to our website. This is independent of which device or software you use our website with. Any input of data by you on our website is voluntary, there are no disadvantages for you due to the non- disclosure of your data. Without certain data, however, it is not possible for us to provide services or conclude contracts. On this website, personal data of the user is only collected within the framework of the applicable data protection law, in particular the General Data Protection Regulation (GDPR). The technical terms used in the text are explained in more detail in Art. 4 of the GDPR. Data processing is permitted under the GDPR in three cases in particular:
- according to art. 6 par. 1 lit. a and 7 GDPR, if you have consented to data processing by us; in each case we will inform you in advance in this data protection declaration and on the occasion of your consent according to art. 4 no. 11 GDPR exactly for what purpose and under which circumstances your data will be processed by us;
- according to Art. 6 para. 1 letter b GDPR, if the processing of your personal data is necessary for the initiation, conclusion or processing of a contractual relationship;
- pursuant to Art. 6 (1) (f) GDPR, if, after weighing up our interests, processing is necessary to protect our legitimate interests; this includes in particular our interests in analysing, optimising and safeguarding the offer on our website – this includes, in particular, an analysis of user behaviour, the creation of profiles for advertising purposes and the storage of access data as well as the use of third-party providers.
Inventory data, usage data and advertising
We collect inventory data (e.g. name, address and e-mail address, services used if applicable) insofar as they are necessary for establishing, structuring the content or changing a contractual relationship between us and the user.
We also collect usage data (e.g. visits to the website, interest in products) in order to enable and invoice the user to use the services on our website. A consolidation of usage data is only carried out by us if and insofar as this is necessary for billing purposes. Otherwise we will only create usage data pseudonymously and only if you have not objected to it. You can send this objection at any time to the address given in the imprint or to the person responsible named in this data protection declaration. Legal basis for this data processing are on the one hand our legitimate interests according to Art. 6 para. 1 lit. f GDPR in the analysis of the website and its use, if necessary also the legal permission to store data within the framework of the initiation of a contractual relationship according to Art. 6 para. 1 lit. b GDPR. Furthermore, each time you use this website our provider stores information, the so-called server log files, which are automatically transmitted by your browser.
- Your IP address
- Type and version of your browser
- host name
- time of visit
- the page from which you visited our site,
- Name of the called page,
- the exact time of the call, and
- the amount of data transferred.
This data is only used for statistical purposes and does not allow us to identify you as a user.
Before sending advertising, we will ask you for your explicit consent in accordance with Art. 4 No. 11 GDPR, unless it concerns advertising for similar products that you have already purchased. This is particularly the case if you give us your consent to receive our newsletter or if you fill out a contact form.
If we ask for your consent to process your data, we will inform you in clear language and easily accessible for which cases you give your consent. Any consent requested by us is voluntary, any advantage you wish to obtain by granting consent can also be obtained without the consent, simply ask us. You have the right to revoke your consent to the processing of your personal data at any time. This can be done by an informal message, e.g. via our contact form, an e-mail to the e-mail address given in the imprint or a unsubscribe link (if offered by us). Your revocation does not affect the legality of the data processing carried out up to then.
Your data will only be stored for as long as required for the purpose of the respective data processing. A further storage is particularly considered if this is still necessary for legal prosecution by us or for our other legitimate interests or if we are legally obliged to still keep your data (e.g. within the framework of tax retention periods, which in principle amount to 6 or even 10 years).
Passing on to third parties
We don’t like spam any more than you do. We will therefore not pass on your data to third parties unless this is legally permitted. A passing on of your data can either
- be required for the performance of a contract and then permitted under Art. 6 para. 1 lit. b GDPR or
- be permitted on the basis of our legitimate interest in an effective structuring of services pursuant to Art. 6 para. 1 lit. f GDPR,
- be covered by a consent you have given, or
- in accordance with Art. 6 Para. 1 lit. c GDPR if we are lawfully claimed by a state or an authority for the surrender of your data.
Transfer abroad, especially to the USA
Our website uses external providers based outside the EU for various functions. In particular, cookies, active Java scripts and other techniques may result in the processing and storage of your data outside the EU. However, we will not pass on your data to a third country unless the EU Commission has determined that your data protection is comparable to that in the EU or you have informed us of your consent or we have agreed the standard contractual clauses with the provider to protect your data. For the USA, the Privacy Shield Agreement at https://www.privacyshield.gov/welcome has once again established sufficient data protection under certain conditions. For more information about your rights with each transfer of data to the USA mentioned below, please visit http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf“.
Rights of users
You can request information from us at any time and free of charge about the personal data we have stored about you. In order to prevent misuse, an identification of your person is required.
Deletion, correction, restriction
You can request us to correct incorrect data at any time and to limit its processing or to delete your data. We will then immediately correct, block or even delete your personal data, unless there are legal reasons to the contrary.
You can ask us to transfer the data stored about you in machine-readable form.
If you feel that your rights have been violated by our data processing, you can lodge a complaint with the competent supervisory authority (here you will find a list of the authorities).
Changes to the data protection declaration
If a change to the data protection declaration becomes necessary for legal or factual reasons, we will update this page accordingly. No changes are made to the consents given by the user.
Encryption of data entry
When you enter data on our website, whether on a contact form, when registering, when logging in or for payment purposes, the website on which you enter the data is encrypted. This prevents third parties from reading what data you enter. You can recognize the encryption by the lock symbol in your browser and by the fact that the address line starts with “https” instead of just “http”.
If you fill out a contact form or send us an e-mail or other electronic message, your details will be stored for the processing of the enquiry, possible follow-up questions or other related questions, and will only be used within the scope of the enquiry. The input of your data is encrypted, so third parties cannot read your data during the input. The basis for this storage is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which you give us by filling out the contact form or your other request. You can revoke this consent at any time by sending us an informal message (e.g. via contact form or e-mail). This revocation does not affect the legality of the data processing carried out up to that point. Your data will be stored as long as it is required for the processing of your enquiry, in particular for the fulfilment of the contract, for legal prosecution by us or for other legitimate interests or if we are legally obliged to keep your data (e.g. within the framework of tax retention periods).
Social Media Links
We refer with links to our offered social media appearances. Unlike social media plugins, links do not already lead to the social media platform knowing about your visit when you visit our site. Like any link, however, your data will be processed by the social media platform at the latest when you click on the link. Please make it clear to yourself whether you want to accept this and only use a social media platform if you have sufficiently informed yourself about the data processing there and agree with it (this applies in particular if you do not yet use this yourself) – we have attached links to the data protection declarations of the social media platform in each case.
Our site uses links to our site on the social network Facebook of Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. It’s just a normal link, so when you visit our site, Facebook won’t know you’ve visited our site. However, if you click on the link, you will be redirected to Facebook, which will also let Facebook know that you have visited our site.
This will transfer your information to the United States, but Facebook is registered with privacy shield and is required to comply with EU data protection rules. For more information on your rights, see
We have no knowledge and no influence on the collection and use of your data by Facebook once the link has been clicked. For more information, please refer to Facebook’s privacy statement at
Our site uses links to our appearance on the social network Twitter of Twitter Inc, 795 Folsom Street, Suite 600, San Francisco, CA 94107, US… It is just a normal link, so when you visit our site, Twitter does not know about your visit to our site. If you click on the link, however, you will be redirected to Twitter, which will also tell Twitter that you visited our site.
This will transfer your data to the USA, but Twitter is registered with privacy shield and is obliged to comply with EU data protection rules. For more information on your rights, see
Our site uses links to our appearance on the social network YouTube of YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA… It is just a normal link, so when you visit our site, YouTube does not know about your visit to our site. However, if you click on the link, you will be redirected to YouTube, which will also let YouTube know that you visited our site.
This will transfer your data to the USA, but YouTube/Google is registered with privacy shield and is obliged to comply with EU data protection rules. For more information on your rights, see
Our site uses links to our site on the Instagram social network of Instagram LLC, represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park CA 94025, USA. It is only a normal link, so when you visit our site, Instagram does not know about your visit to our site. However, clicking on the link will take you to Instagram, which will tell you that you visited our site.
This will transfer your information to the United States, but Instagram is registered with privacy shield and is required to comply with EU privacy laws. For more information on your rights, see
Within the framework of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization according to Art.6 Para. 1 lit.f GDPR for the integration of videos we use the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Normally your IP address is already sent to YouTube and cookies are installed on your computer when you visit a page with embedded videos. However, we use a two-click solution, which only tells Google about your IP address and your visit to our website when you click the button. If you activate the plugin while logged in to YouTube, Google can assign your usage to your user account. As a result, your data will be transferred to the USA, but Google is registered with privacy shield and is obliged to comply with EU data protection regulations. You can find more information about your rights under http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf. We have no knowledge of and no influence on the possible collection and use of your data by Google. Further information can be found in Google’s data protection declaration at https://www.google.de/intl/de/policies/privacy/ In addition, for general handling and deactivation of cookies, we refer to our general description in this data protection declaration.
Within the framework of our legitimate interest in a technically flawless online offer and its economically efficient design and optimisation in accordance with Art.6 Para. 1 lit.f GDPR we use the tool Google Analytics from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94.043 USA. This allows the use of websites to be analysed and pseudonymous profiles of users can be created from the data. Google uses various techniques to do this, including storing cookies on your computer. These store information about the use of our site, which we use to improve our offer. The data collected by Google is transmitted by Google to countries outside the EU, in particular the USA. Google has submitted to the Privacy Shield Framework, more information about your rights can be found at http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf We have taken additional precautions to ensure that your data is adequately protected. We anonymise your IP address before transmission to Google. This was done by activating the function Anonymizelp() within the Google Analytics tracking code. We have also entered into a contract with Google to process your order data, whereby Google will not combine your data with other data collected by Google in order to determine your identity. If this is not enough for you, you can also download and install Google’s browser plug-in to block Google Analytics under the link http://tools.google.com/dlpage/gaoptout?hl=en, which blocks Google from collecting and passing on your personal data. You can also prevent collection by Google Analytics by deactivating Google Analytics by clicking the following link: deactivate Google Analytics, which also prevents the collection of your data (see https://developers.google.com/analytics/devguides/collection/gajs/ ). If you would like to learn about Google’s privacy practices, please use the following link: https://www.google.de/intl/de/policies/privacy/
Extension of Google Analytics
Google Analytics also helps us evaluate data from AdWords and the double-click cookie for statistical purposes. If you do not wish to do so, you can make extensive settings in the Ads Preferences Manager https://www.google.com/settings/u/0/ads/authenticated or deactivate the service completely.