Skip to content
FBZ
EN / DE
Legal

Privacy Policy

Last updated: April 2026

1. Controller

The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

BBA GmbH
Silberberger Chaussee 14
15526 Bad Saarow, Germany
Phone: +49 33631 58376
Email: info@bba-badsaarow.de

Managing Director: Dr.-Ing. Jörn Budde

2. Data Protection Officer

The appointment of a data protection officer is not mandatory for us under § 38 para. 1 BDSG because fewer than 20 persons in our company are continuously involved in the automated processing of personal data. For privacy questions, please contact the address above.

3. Hosting via Vercel

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel is certified under the EU-US Data Privacy Framework. We have additionally concluded a Data Processing Agreement (DPA) and EU Standard Contractual Clauses with Vercel.

When you access our website, Vercel automatically records server log files that your browser transmits. These include, in particular:

  • anonymised IP address
  • date and time of access
  • requested URL
  • browser type and operating system
  • referrer URL

These data serve exclusively to ensure trouble-free operation, threat detection, and technical optimisation. No merging with other data sources takes place.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and efficient website operation).
Retention: server log files are deleted or anonymised after no more than 30 days.

4. Fonts (self-hosted)

This website uses the typefaces “Clash Display" and “Satoshi", which are embedded locally on our server. There is no connection to external font-CDN services such as Google Fonts or Fontshare. No data is transmitted to third parties when the website is loaded.

5. Cookies

This website uses no cookies — neither technically necessary nor optional. A consent banner is therefore not required.

6. Analytics and tracking

This website uses no analytics or tracking services (such as Google Analytics, Vercel Analytics, Matomo, Plausible, Facebook Pixel, Sentry, or comparable tools). No user-based reach measurement takes place.

7. Contact by email

If you contact us by email or via the “Request a quote" link, the data you provide (e.g. name, email address, message, and project information) will be stored by us for processing your inquiry and for possible follow-up questions.

Legal basis: Art. 6 para. 1 lit. b GDPR (initiation of a contractual relationship) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering inquiries).
Retention: until the processing of your inquiry is complete. Mandatory statutory retention obligations under German commercial and tax law (up to 10 years pursuant to § 257 HGB, § 147 AO) remain unaffected.

8. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the lock symbol in your browser's address bar and by the address starting with “https://".

9. Transfer to third countries

A transfer of personal data to third countries takes place exclusively in the context of hosting by Vercel (USA). Vercel is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection. In addition, EU Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR have been agreed.

10. Your rights as a data subject

You have the following rights with regard to personal data concerning you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 para. 3 GDPR)

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority for BBA GmbH is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow, Germany
www.lda.brandenburg.de

11. Right to object (Art. 21 GDPR)

Where personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to such processing. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. Please send your objection to info@bba-badsaarow.de.

12. Currency of this privacy policy

This privacy policy is currently valid and was last updated in April 2026. Due to the further development of our website or changing legal or regulatory requirements, it may become necessary to update this privacy policy.