Privacy Policy

1. Controller

Baduno GmbH, Mainzer Landstraße 166, 60327 Frankfurt am Main, Germany, Phone: +49 69 95209894, Email: [email protected]. Represented by Managing Director Mahsa Asgarian.

2. Hosting and Server Log Files

This website is operated on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in a data center in Germany. When you access the website, the server automatically processes technical access data (IP address, date and time, requested file, referrer, browser type) to deliver the website and ensure system security (Art. 6(1)(f) GDPR). Log files are deleted after a maximum of 14 days. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

3. Cookies and Consent Management

We use technically necessary cookies (language setting, storage of your cookie decision) based on Section 25(2) TDDDG. All other cookies (statistics, marketing) are only set after your explicit consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can revoke your consent at any time with future effect via “Cookie Settings” in the footer. We use Google Consent Mode v2: Without your consent, no marketing or statistics identifiers are transmitted.

4. Google Analytics 4

With your consent, we use Google Analytics 4 from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to analyze the usage of our website. IP addresses are not stored by Google Analytics 4. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR. Storage duration of reports: 14 months. Revocation at any time via cookie settings.

5. Google Ads and Conversion Tracking

With your consent, we use Google Ads with conversion tracking and remarketing (Google Ireland Limited). This measures whether you reached us via an advertisement and whether defined actions (e.g., an inquiry) occur. Legal basis: Art. 6(1)(a) GDPR. Revocation at any time via cookie settings.

6. Contact

When you contact us via form, email, or phone, we process your information (name, contact details, content of the inquiry) to handle the inquiry and for follow-up questions (Art. 6(1)(b) GDPR). We delete inquiry data once the inquiry has been finally processed and no statutory retention obligations conflict.

7. Contract Processing and Payment Service Providers

To process contracts, we process master data, contract data, and invoice data (Art. 6(1)(b) GDPR; retention according to Sections 147 AO, 257 HGB). For payments, we use, depending on your choice, the following payment service providers who process your payment data under their own responsibility: Stripe Payments Europe Ltd. (Ireland), PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg), and Mollie B.V. (Netherlands). We do not store complete payment card data.

8. External Services in Service Delivery

In the context of our localization and content services, we use AI services as processors or tools (including DeepSeek for machine translation and Magnific/Freepik for image generation). Customer content is only processed to the extent necessary for service delivery; confidential data is removed or pseudonymized before transmission unless otherwise agreed contractually.

9. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21 GDPR). Granted consent can be revoked at any time with future effect. You also have the right to lodge a complaint with a supervisory authority; for us, the competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, Wiesbaden.

10. Status

Status of this privacy policy: July 2026. We will update this policy if the legal situation or processing activities change.