Privacy Policy


1. Name and contact details of the controller


The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:


BAS GmbH

Storkower Straße 6

15749 Mittenwalde OT Gallun

Germany

Phone: +49 3376 44633-01

E-mail: info@basgmbh.de


No Data Protection Officer has been appointed, as there is no legal obligation to do so. However, you can contact us at any time regarding data protection issues using the above contact details.


2. Data collection when visiting our website (server log files)


When you access our website, the browser used on your device automatically sends certain information to our website server (hosted by Strato, see below). This information is temporarily stored in so-called server log files. The following data may be collected without your intervention and stored until automated deletion:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access occurs (referrer URL)
  • Browser type and, if applicable, the operating system of your computer as well as the name of your access provider


The processing of these log data takes place for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring comfortable use of our website
  • Evaluation of system security and stability
  • Administrative purposes (e.g., technical error analysis)


The legal basis for the temporary storage of the data and the log files is Article 6 (1) (f) GDPR. Our legitimate interest derives from the purposes listed above. Server log files are automatically deleted once the respective purpose has been fulfilled (usually after a few days). There is no merging of this data with other data sources.


3. Hosting by Strato AG


Our website is hosted by Strato AG, Pascalstraße 10, 10587 Berlin, Germany. Strato processes the data mentioned in Section 2 (server log files) as well as any data transmitted via the website (e.g., entries in the contact form) on our behalf for the purpose of hosting and displaying the website, based on a data processing agreement in accordance with Article 28 GDPR.


All aforementioned data are processed on Strato servers located within the European Union. For more information on Strato’s data processing, please refer to Strato’s privacy policy.


4. Contact form and email communication


If you contact us via the contact form on our website or by email, the information you provide (including your name, email address, subject, and message) will be processed solely for the purpose of handling your inquiry and for any necessary follow-up.


The contact form collects the following mandatory information: name, email address, subject, and message. Optional fields may be provided for additional voluntary details.


The legal basis for processing your data depends on the nature of your inquiry:

  • Article 6 (1) (b) GDPR if your request is related to a pre-contractual measure or an existing contract
  • Article 6 (1) (f) GDPR if our legitimate interest lies in handling your inquiry


Your data will not be passed on to third parties without your consent and will be deleted after the request has been fully processed, provided that no statutory retention obligations exist.


5. Cookies and tracking


Our website does not use cookies and does not employ any tracking or web analytics tools. No personal data are collected or stored via such technologies.


Note: In exceptional cases, technically necessary session cookies may be used for operational purposes (e.g., to maintain settings or login status). Such cookies do not contain personal data and are generally deleted after you leave our website. (Currently, no such cookies are in use on our website.)


6. Social media and external links


We maintain an online presence on LinkedIn to provide information about our company and products and to communicate with customers/contacts. Our website contains a link to our LinkedIn company profile (recognizable by the LinkedIn logo). No data is transferred to LinkedIn simply by displaying our website. Data transfer to LinkedIn only occurs if you actively click the link, leaving our website and navigating to LinkedIn.


Please note that the LinkedIn platform’s own privacy policy applies once you are on their site. LinkedIn Corporation (LinkedIn Ireland Unlimited Company for EU users) processes your personal data independently and, in some cases, jointly with us. For more details, please consult LinkedIn’s privacy policy. We have no control over LinkedIn’s data processing. If you do not want LinkedIn to collect your data, please do not click the link.


Our website also contains links to other external websites (e.g., product datasheets on ausschreiben.de). Our privacy policy does not apply to these external websites. When you click an external link, we have no influence over the processing of your data by the external provider. Please check the privacy policies of the respective websites.


7. Data sharing


Your personal data will generally not be shared with third parties unless:

  • You have given your explicit consent (Article 6 (1) (a) GDPR)
  • The sharing is necessary for contract performance (Article 6 (1) (b) GDPR)
  • There is a legal obligation to share the data (Article 6 (1) (c) GDPR)
  • The sharing is necessary for the protection of our legitimate interests (Article 6 (1) (f) GDPR) and there is no reason to assume that your interests in not having your data shared outweigh our interests


8. Your rights


Under applicable data protection law, you have the following rights as a data subject:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (“right to be forgotten”, Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to withdraw consent at any time (Article 7 (3) GDPR)
  • Right to object to processing based on legitimate interests (Article 21 GDPR)
  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR)


For BAS GmbH, the competent supervisory authority is the State Commissioner for Data Protection and the Right of Access to Files of Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.


9. Right to object (Article 21 GDPR)


If your personal data are processed based on Article 6 (1) (f) GDPR (legitimate interest), you have the right to object at any time for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is for the establishment, exercise, or defence of legal claims.


If your personal data are processed for direct marketing purposes (which we currently do not engage in), you have the right to object to such processing at any time. If you object to processing for direct marketing, your personal data will no longer be processed for these purposes.


You may exercise your right to object by sending a simple message to us, e.g., by email to info@basgmbh.de.


10. Data security


We use appropriate technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.


Data transmission on our website is encrypted using SSL/TLS technology (recognisable by “https://” and the padlock icon in the browser address bar). This ensures that the data you transmit to us are protected from access by unauthorised third parties during transmission.


11. Updates to this privacy policy


This Privacy Policy is currently valid and was last updated in August 2025.


Due to developments in our website or changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The latest version can always be accessed on our website under Privacy Policy. Changes become effective once published on our website.