Privacy Policy

Controller within the meaning of the General Data Protection Regulation (GDPR):
Bayern Engineering GmbH & Co. KG
Rösnerstraße 26
83052 Bruckmühl
Phone: +49 8062 70199 30
E-Mail: info@bayern-engineering.de

Contact person for data protection issues:
Erich Kühbandner

For questions regarding data protection, you can reach us on weekdays from 10:00 a.m. to 5:00 p.m. at the phone number +49 8062 70199 30 or via e-mail at info@bayern-engineering.de.

We collect data about every access to our online offer (so-called server log files). The access data includes: name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

The log data is used without assignment to the person of the user and without creating profiles exclusively for statistical evaluations, for security purposes, and to optimize our online offer. The IP addresses are stored for a maximum of 1 year in order to trace hacker attacks and similar incidents. The legal basis for this processing is our legitimate interest in the security and functionality of our online offer (Art. 6 para. 1 lit. f GDPR). You have the right to object to this processing at any time for reasons arising from your particular situation (Art. 21 GDPR).

Our website is hosted on our own servers. No data processing is carried out by external hosting providers.

Personal data is only collected and used by us if this is legally permitted or if the user has consented to the data collection.

a) Contact Form

When using our contact form, the user's details (name, e-mail address, message) are stored for the purpose of processing the request and in case follow-up questions arise. This data is stored in our CRM system until the user revokes their consent. The legal basis is the user's consent (Art. 6 para. 1 lit. a GDPR) or the fulfillment of pre-contractual measures (Art. 6 para. 1 lit. b GDPR). No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

b) Security Measures

We have taken the following technical and organizational measures to ensure the security of your data and to prevent accidental or intentional manipulation, loss, destruction, or access by unauthorized persons:

• Encryption of data transmission (TLS)
• Regular security audits
• Access restrictions to personal data

User data is only transferred to third parties if this is legally permitted or if the user has consented to the transfer. This is the case, for example, if the transfer of data is necessary for the fulfillment of contractual obligations to the user or if data is requested by competent authorities such as law enforcement agencies.

We use the service provider lexoffice for the processing of invoicing data. An order processing agreement in accordance with Art. 28 GDPR exists with lexoffice.

Data is not passed on to third parties for advertising purposes or for the creation of user profiles. No data is transferred to third countries.

Every person affected by data processing has the following rights:

• Right of access (Art. 15 GDPR): You can request information about the data stored about you.
• Right to rectification (Art. 16 GDPR): You can request the correction of incorrect data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided there is no legal obligation to retain it.
• Right to restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You can request the release of the data concerning you in a machine-readable format.
• Right to object (Art. 21 GDPR): You can object to the processing of your data.
• Right to withdraw consent (Art. 7 para. 3 GDPR): You can revoke your consent at any time.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

Requests will be answered within the legal period (usually 1 month). To ensure that requests are only made by authorized persons, we reserve the right to request proof of identity if necessary. This can be done, for example, by presenting an official identification document.

Applications sent to us by e-mail are used exclusively for the purpose of processing the application procedure. The data will be deleted after the completion of the procedure, but no later than after 6 months, unless there is other consent or a legal obligation to retain the data.

We do not use cookies, tracking tools (e.g. Google Analytics) or social media plugins. Therefore, no further information is required.

We reserve the right to adjust this privacy policy to adapt it to changed legal situations or changes to our service or data processing. Significant changes will be communicated to you by e-mail. The current version is always available on this page.

Status: September 2025