Information on data processing for this website in accordance with Art. 13 of the EU General Data Protection Regulation (GDPR) when collecting personal data from the data subject
(Version: GDPR 2.1 from April 2025)
BAU Süddeutsche Baumaschinen Handels GmbH is responsible for this website and, as the provider of a teleservice, must inform you at the beginning of your visit about the type, scope and purpose of the collection and use of personal data in a precise, transparent, comprehensible and easily accessible form in clear and simple language. This content must be available to you at all times.
We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of the European and national laws currently in force.
With the following data protection information, we would like to show you how we handle your personal data and how you can contact us:
BAU Süddeutsche Baumaschinen Handels GmbH
Am alten Flugplatz 5
89231 Neu-Ulm
Germany
Trade Register No.: HRB 7322
Authorized Directors: Dr.-Ing. Christoph Karrer, Monika Karrer and Christoph Schadenfroh
Phone: +49 731 97419-0
E-Mail: info@bau-baumaschinen.de
Our data protection officer
Sven Lenz
Deutsche Datenschutzkanzlei – Datenschutzkanzlei Lenz GmbH & Co. KG
Bahnhofstraße 50
87437 Kempten
Germany
If you have any questions regarding data protection or other data protection issues, please send an e-mail to the following address: datenschutz@bau-baumaschinen.de
A. General Information
For the sake of clarity, we do not differentiate between genders. In the sense of equal treatment, corresponding terms apply to all genders.
The meaning of the terms used, such as “personal data” or “processing”, can be found in Art. 4 GDPR.
The personal data processed in the context of this website include
- inventory data (e.g. customer names and addresses),
- contract data (e.g. services used, administrator names, payment information),
- usage data (e.g. pages visited on our website, interest in our products) and
- content data (e.g. entries in the contact form).
B. Specific Information
Privacy Policy
We guarantee that we will only process your data in connection with the processing of your inquiries and for internal purposes as well as to provide the services or content you have requested.
Basics of data processing
We process your personal data only in compliance with the relevant data protection regulations and on the basis of the following legal bases:
-Processing for the fulfillment of our services and implementation of contractual measures
Art. 6 para. 1 lit. b) GDPR
-Processing for the fulfillment of our legal obligations
Art. 6 para. 1 lit. c) GDPR
-Consent
Art. 6 para. 1 lit. a) and Art. 7 GDPR
-Processing for the protection of our legitimate interests
Art. 6 para. 1 lit. f) GDPR
Data transmission to third parties
We would like to point out that data may be transmitted when you use our website if you select the services offered via the “cookie consent tool” provided on the website. If you do not select a service, no data will be transmitted to third parties.
In the context of website hosting, the service provider used may have access to your data. We have described which web host we use in this privacy policy.
Your data will only be passed on to third parties in accordance with legal requirements. We only pass on your data if this is necessary, for example, for contractual purposes or on the basis of legitimate interests in the economic and effective operation of our business.
If we use subcontractors to provide our services, we take suitable legal precautions and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.
Transfer of data to a third country or an international organisation
Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.
We would like to point out that when using our website, data may be transferred to a third country if you select the services offered via the “cookie consent tool” provided on the website. If you do not select a service, no data will be transferred to a third country.
The adequacy decision of the EU Commission is taken into account here. This states that it is a safe third country or a safe international organization that offers an adequate level of protection.
The following applies to data transfers to the USA: Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA.
The US services used are certified under the Data Privacy Framework. Details can be found under the individual services.
Retention period of your personal data
We adhere to the principles of data minimization and data avoidance. This means that we only store your data for as long as is necessary to fulfill the aforementioned purposes or as stipulated by the various storage periods provided for by law. If the respective purpose no longer applies or after expiry of the corresponding periods, your data will be routinely blocked or deleted in accordance with the statutory provisions.
Contacting us
Personal data is processed when you contact us electronically (e.g. via contact form or email). The information you provide will be stored exclusively for the purpose of processing the request and for possible follow-up questions.
We would like to inform you of the legal basis for this:
– Processing for the fulfillment of our services and implementation of contractual measures Art. 6 para. 1 lit. b) GDPR
We would like to point out that e-mails can be read or changed unauthorized and unnoticed during transmission. We would also like to draw your attention to the fact that we use software to filter unwanted emails (spam filter). The spam filter can reject e-mails if they have been falsely identified as spam due to certain characteristics.
What are your rights?
a) Right of information
You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing which of your personal data we have retained. This also includes the origin and recipients of your data, as well as the purpose of data processing.
b) Right to correction
If the data stored with us is incorrect, you have the right to have it corrected. In doing so, you can demand the processing to be restricted, e.g. if you dispute the correctness of your personal data.
c) Right to block
Furthermore, you can have your data blocked. In order to ensure that your data is blocked at any time, this data must be kept in a block file for control purposes.
d) Right of deletion
You can request the deletion of your personal data, provided that there are no legal obligations to keep records. If such an obligation exists, we will block your data upon request. If the relevant legal requirements are met, we will delete your personal data even without your request.
e) Right to data transferability
You have the right to request that we provide you with the personal data sent to us in a format that allows it to be transferred to another location.
f) Right of appeal to a supervisory authority
You have the possibility to lodge a complaint with one of the data protection supervisory authorities.
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
Phone: +49 981 53-1300
Fax: +49 981 53-981300
You can open the complaint form via the following link: https://www.lda.bayern.de/de/beschwerde.html
g) Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data in accordance with Art. 6 (1) (e) and (f); this also applies to profiling based on these provisions.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct advertising. All you need to do is send us an email to this effect.
h) Right to withdraw consent
You have the option to withdraw your consent to the processing of your data at any time with effect for the future without giving reasons. You will not suffer any disadvantages as a result of the revocation. All you need to do is send us an e-mail to this effect.
However, such a revocation does not affect the legality of the processing carried out up to the time of revocation on the legal basis of Art. 6 para. 1 letter a) GDPR.
To assert your rights as a data subject, please send us an email to one of the email addresses listed above.
Protection of your personal data
We take state-of-the-art contractual, technical and organisational security measures to ensure that the data protection laws are observed and thus to protect the processed data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
Security measures include, in particular, the encrypted data transmission between your browser and our server. A 256-bit SSL (AES 256) encryption technology is used for this purpose.
In this context, your personal data will be protected as follows (excerpt):
a) Maintaining the confidentiality of your personal data
In order to protect the confidentiality of your data stored with us, we have taken various measures for access and entry control.
b) Maintaining the integrity of your personal data
In order to maintain the integrity of your data stored with us, we have taken various measures to control the transfer and input of data.
c) Ensuring the availability of your personal data
In order to ensure the availability of your data stored with us, we have taken various measures for order and availability control.
The security measures in use are continuously improved in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our website due to the insecure nature of the Internet. Therefore, any data transmission carried out by you is at your own risk.
Protection of minors
Personal information may only be made available to us by persons under the age of 16 with the express consent of a parent or guardian. This data will be processed in accordance with this Privacy Policy.
Server log files
The provider of the pages automatically collects and retains information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser
version - Operating system used
- Referrer URL
- Host name of the accessing
computer - Time of the server request
- IP address
This data will not be merged with other data sources.
The basis for the data processing in accordance with Art. 6 para. 1 lit. f) GDPR, is our legitimate interest in (provision and protective measures to prevent misuse of our website) and in accordance with Art. 6 para. 1 lit. b) GDPR, which permits the processing of data in order to fulfil a contract or pre-contractual measures.
Online applications via a form
We offer applicants on our website the opportunity to apply online by filling in the appropriate form. To be included in the application process, applicants must provide us with all the personal data required for a thorough and informed assessment and selection via the form.
The information required includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific evidence of the qualifications required for a position. Health-related information may also be required, which must be given special consideration under labour and social law to ensure the applicant’s social protection.
By sending the form, your data will be encrypted using the latest technologies and will be used exclusively for the purpose of processing your application.
The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR in conjunction with § 26 para. 1 BDSG, where the completion of the application procedure is regarded as the initiation of an employment contract. Insofar as special categories of personal data in terms of Art. 9 para. 1 GDPR (e.g. health data such as information on the status of severely disabled persons) are requested from applicants during the application procedure, processing is carried out in accordance with Art. 9 para. 2 lit. b) GDPR so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations.
Based on this, or alternatively, the processing of the special categories of data may also be carried out according to Art. 9 para. 1 lit. h) GDPR if it is carried out for purposes of preventive health care or occupational medicine, for assessing the applicant’s ability to work, for medical diagnosis, care or treatment in the health or social field or for the management of systems and services in the health or social field.
If, in the course of the evaluation described above, the applicant is not selected, or if an applicant withdraws his or her application prematurely, the data provided by the applicant will be deleted after six months at the latest after notification to this effect. This period is calculated on the basis of our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to comply with our obligation to provide evidence under the regulations on the equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b) GDPR in conjunction with § 26 para. 1 BDSG for the purposes of carrying out the employment relationship.
Cookies
Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies make it possible, for example, to recognize the Internet browser. The files are used to help the browser to navigate through the website and to make full use of all functions.
Cookie consent tool
We use a so-called “cookie consent tool” to obtain effective user consent for cookies requiring consent and cookie-based applications.
This website uses the Borlabs cookie consent tool from the provider Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg.
The “Cookie Consent Tool” is displayed to users when they access a page in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by ticking the appropriate box. This ensures that such cookies are only set on the user’s end device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is not processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
Website hosting
We use the system of the following provider to host our website and display the page content: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
All data collected on our website is processed on the provider’s servers.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Use of videos from YouTube
We use the YouTube implementation function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TDDDG.
You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.
Data is transferred to a third country (in this case the USA) or an international organization. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA. According to the list of certified companies published by the US Department of Commerce, Google LLC is listed as a certified company.
According to information from “YouTube”, cookies are used to collect video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button.
Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence. Further information on data protection at “Y-ouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy
Google Analytics 4 (with cookies, with UserIDs, without Google Signals)
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyze the use of websites.
When using Google Analytics 4, so-called “cookies” are used as standard. Cookies are text files that are stored on your end device and enable your use of a website to be analyzed. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server, where it is stored and processed. This may also result in information being transmitted to the servers of Google LLC based in the USA and further processing of the information there.
When using Google Analytics 4, the IP address transmitted by your end device when you use the website is always collected and processed in anonymized form by default and automatically, so that the information collected cannot be directly linked to a person. This automatic anonymization is carried out by shortening the last digits of the IP address transmitted by your device by Google within member states of the European Union (EU) or other parties to the Agreement on the European Economic Area (EEA).
Google uses this and other information on our behalf to evaluate your use of the website, to compile reports on your website activity and usage behavior and to provide us with other services relating to your use of the website and the Internet. The abbreviated IP address transmitted by your device as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the use of third-party provider information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and differentiate between user groups of the website for the purpose of target group-optimized marketing measures. However, data collected via the “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally. This data collected via the “demographic characteristics” function is stored for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 TDDDG have given your express consent. Without your consent, Google Analytics 4 will not be used during your use of the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the “cookie consent tool” provided on the website.
In connection with this website, the “Use-rIDs” function is also used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have Google create cross-device reports (reports) (so-called “cross-device tracking”). This means that if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, your usage behavior can also be analyzed across devices if you have set up a personal account by registering on this website and are logged in to your personal account on different devices with your relevant login data. The data collected in this way shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place.
We have concluded a so-called order processing contract with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
In order to ensure compliance with the European level of data protection, including in the event of any transfer of data from the EU or the EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites
Use of Google Ads conversion tracking
We use the online advertising program “Google Ads” on this website and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). By using Google Ads, we can draw attention to our offers on external websites with the help of advertising material (so-called Google Adwords) and also measure the success of this advertising campaign. We do this in order to be able to show you advertising tailored to you.
If a user clicks on an Ads ad placed by Google, a cookie (small text file) is placed on their device for conversion tracking on your device. These cookies generally lose their validity after 30 days and are not used for personal identification. The cookie enables us to recognize with the help of Google that the user was redirected to our site by clicking on the ad.
Cookies can therefore not be tracked beyond the websites of Google Ads customers. The information collected is used to create conversion statistics and provide us with information about the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
We only use Google Ads if you have given us your consent to do so, Art. 6 para. 1 lit. a GDPR i.V.m. § 25 TDDDG. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA. According to the list of certified companies published by the US Department of Commerce, Google LLC is listed as a certified company.
You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website or alternatively follow the option described above to make an objection.
However, you can also block this use by deactivating the Google Conversion Tracking cookie via your Internet browser under the menu item “User settings”. You will then not be included in the conversion tracking statistics.
You can find more information about Google’s privacy policy at the following Internet address: https://www.google.de/policies/privacy
You can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link
https://www.google.com/settings/ads/plugin?hl=de
Please note that you may not be able to use certain functions of this website, or only to a limited extent, if you have deactivated the use of cookies.
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing. This allows us to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit.
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TDDDG.
You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website or alternatively follow the option described above to make an objection.
Any further data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data in order to create target groups.
Details on the processing triggered by Google Ads Remarketing and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites.
We have concluded a so-called order processing contract with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
Data is transferred to a third country (in this case the USA) or an international organization. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA. According to the list of certified companies published by the US Department of Commerce, Google LLC is listed as a certified company.
Further information and the data protection provisions regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/.
Microsoft Advertising
We use the “Microsoft Advertising” conversion tracking technology from Microsoft
(Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) on our website.
For this purpose, Microsoft places a cookie on your end device if you have reached our website via a
Microsoft Advertising ad displayed in Bing. Microsoft Advertising Conversion Tracking
enables us to track user activities such as purchases or registrations after an ad click.
Microsoft sets a cookie for this purpose. This cookie loses its validity after 180 days and is not intended to identify
personally. If you visit certain pages of this website and the
cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to
on this page (conversion page).
The information collected with the help of the conversion cookie is used to create conversion statistics,
i.e. to record how many users reach a conversion page after clicking on an ad. We
learn the total number of users who clicked on our ad and were redirected to a page with a
conversion tracking tag. However, we do not receive any information with which
users can be personally identified.
Where legally required, we have obtained your consent to the processing of your data as described above
in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 TDDDG.
You can revoke your consent at any time with effect for the future. To exercise your revocation
, deactivate this service in the “Cookie-Consent-Tool” provided on the website.
There may be a transfer to Microsoft servers in the USA and thus a
data transfer to a third country (here USA). Since July 2023, there has been an adequacy decision by the
EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU
. The adequacy decision can now serve as the basis for
data transfers to certified organizations in the USA. According to the list of certified companies published by the US Department of
Commerce, Microsoft Corporation is listed as a certified
company.
You can find more information about Microsoft’s data protection provisions at the following Internet address: https://privacy.microsoft.com/de-de/privacystatement.
Google Tag Manager
We use the service called Google Tag Manager from Google. “Google” is a group of companies consisting of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.
Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. Google Tag Manager ensures that other components are loaded, which in turn may collect data. Google Tag Manager does not access this data.
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TDDDG. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.
Data may be transferred to a third country (in this case the USA) or an international organization. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA. According to the list of certified companies published by the US Department of Commerce, Google LLC is listed as a certified company.
Further information on Google Tag Manager can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de
Social networks
In addition to this online offering, we also maintain presences in various social media, which you can access via the corresponding buttons on our website. When you visit such a presence, personal data may be transmitted to the provider of the social network. It is possible that, in addition to the storage of the data you specifically enter in this social medium, further information may also be processed by the provider of the social network.
Further information can be found in our social media privacy policy.
Changes to our privacy policy
We reserve the right to amend our privacy policy at short notice to ensure that it always complies with current legal requirements or to implement changes to our services. This may concern, for example, the introduction of new services. The new data protection information will then apply to your next visit.