Privacy Policy

1. Data Protection at a Glance

The following information provides a simple overview of what happens to your personal data when you visit this website.

Responsible Entity

Batemo GmbH Benzstraße 15 76185 Karlsruhe Germany Phone: +49 (0) 721 90990170 Email: info@batemo.de

2. Visiting Our Website

When you access our website, we collect and process the following data:

  • Referring website;
  • Browser type and operating system used;
  • Your IP address;
  • Requested files, transferred data volumes, downloads/file exports;
  • Information about the websites you visit on our site, including date and time.

We transfer this data to Hetzner Online GmbH, Germany, as they host our website externally, on the basis of a data processing agreement. This processing is necessary to safeguard our legitimate interests in accordance with Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in ensuring the functionality and technical security of our website, in particular by defending against attempts to attack our web server.

To protect our contact form from bots and spam, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile is only loaded on our contact page. As part of the process of verifying that you are human, your IP address and technical characteristics of your browser are transmitted to Cloudflare and processed there. Cloudflare may process this data in the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework. The processing of this data is necessary to safeguard our legitimate interests in accordance with Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in protecting our website from abusive automated access and spam.

To analyse the use of our website, we use Plausible Analytics, which we operate ourselves on our server at Hetzner Online GmbH, Germany. Plausible does not use cookies and does not store any information on your device. Plausible records the page visited, the referring website, browser, operating system, device type and country, as well as clicks on downloads and external links. To count visitors, a hash value is formed from your IP address and browser information using a key that changes daily; your IP address itself is not stored. We only evaluate this data in aggregated form; it does not allow us to identify you. The processing is necessary in accordance with Art. 6 (1) lit. f) GDPR to safeguard our legitimate interest in the statistical analysis and needs-based design of our website.

3. Contact via Contact Form

If you contact us via the contact form, the personal data provided in the contact form will be processed solely for the purpose of processing your request. If your request relates to an existing contractual relationship with you or if you are interested in concluding a contract and contact us, the processing of this data is necessary in accordance with Art. 6 (1) lit. b) GDPR for the performance of the contract or for the implementation of pre-contractual measures. Otherwise, the processing of this data is necessary in accordance with Art. 6 (1) lit. f) GDPR to safeguard our legitimate interest in being able to respond to your request with the information relevant to you. If you voluntarily provide optional information, the processing of your corresponding personal data is based on your consent in accordance with Art. 6 (1) lit. a) GDPR.

Your request is forwarded by email to our sales team, and you receive a confirmation of receipt at the email address you provided. So that your request is not lost if forwarding fails, we store it temporarily on our server, together with the page from which you sent it, your browser identifier and a pseudonymised form of your IP address. This entry is deleted as soon as your request has reached our sales team.

In addition, we anonymously count every request that is submitted, to assess the impact of our website. We store only the topic of the request, whether a company was given, whether the email address comes from a general provider, the page and language from which the request was sent, and the number of pages visited. Your name, email address, company, message and IP address are not stored for this purpose; it is not possible to identify you from this data.

We send these emails via Microsoft 365, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, on the basis of a data processing agreement.

With your request, the contact form can also send the pages you have viewed during this visit (address, title and viewing time of each page) and the selections you made on them, for example the cells you compared. This allows us to answer your request precisely. This list is stored only in your browser for the open tab (session storage) and is deleted when you close the tab. It is only transmitted if you submit the form. You can view the list in the form under “show what we send” and exclude it by unticking the corresponding box; your request will be processed in the same way. The list is only included in the email to our sales team and is not stored anywhere else. The processing is necessary in accordance with Art. 6 (1) lit. f) GDPR to safeguard our legitimate interest in answering your request precisely and without further enquiries.

4. Batemo Insights Account

You can create an account on our website to gain access to Batemo Insights. When you create a customer account using the corresponding registration form, we will process the personal data you provide in it. The processing of this personal data is necessary for the performance of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR.

If you download certain data sets or other content via Batemo Insights, these will be marked with a digital watermark that clearly identifies the platform as the source of these data sets or other content and links the respective data sets or other content to the respective customer account. For this purpose, we process the personal data you provide when creating a customer account. This processing is necessary in accordance with Art. 6 (1) lit. f) GDPR to safeguard our legitimate interests. Our legitimate interest here lies in ensuring platform security, preventing misuse, and, in the event of misuse, pursuing legal claims if necessary.

Our own visitor statistics (Plausible, see section 2) work without cookies. Some functions (for example the cell comparison, the calculators and the list of visited pages for the contact form, see section 3) store information in your browser’s session storage. This information applies only to the open tab, is deleted when you close it and does not leave your browser unless you submit the contact form. This storage is strictly necessary to provide these functions (§ 25 (2) no. 2 TDDDG).

On your first visit we ask for your consent before we use Google Analytics or Google Ads. You can allow or refuse each category (“Statistics”, “Advertising”) separately, and you can change or withdraw your choice at any time with “Cookie settings” at the bottom of every page. Withdrawing consent is as easy as giving it. Until you consent, no Google service is loaded and no data is sent to Google.

We store your choice in the cookie “cc_cookie” for six months. This storage is strictly necessary to respect your choice (§ 25 (2) no. 2 TDDDG).

5.2 Google Analytics 4 (category “Statistics”)

If you consent, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics shows us how visitors use our website across several visits, so that we can improve the pages. For this purpose, Google Analytics stores cookies on your device (_ga, ga<ID>) and processes, among other things, the pages you visit, the time of your visit, your device and browser, the referring website, your approximate location and interactions such as sending the contact form. Google Analytics 4 does not store IP addresses. We receive only statistical evaluations, not data that identifies you.

Google Analytics keeps the event data for 14 months and then deletes it. The cookies _ga and ga<ID> remain on your device for at most two years, unless you withdraw your consent earlier.

5.3 Google Ads conversion tracking (category “Advertising”)

We advertise with Google Ads. If you consent and you reached our website through a Google ad, Google stores cookies on your device (for example _gcl_au, _gcl_aw). When you submit the contact form, we report this to Google, so that we can see which ads lead to enquiries and spend our budget accordingly. Google tells us only the number of such enquiries per ad; we do not receive any information that identifies you. The provider is Google, see section 5.2.

The legal basis for Google Analytics and Google Ads is your consent (§ 25 (1) TDDDG and Art. 6 (1) lit. a) GDPR). Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. When you withdraw your consent, we stop using these services and delete the Google cookies set on our domain.

6. Social Media

General information

We maintain a publicly accessible social media presence on the LinkedIn social network in order to offer you additional options for contacting us or receiving information from us, alongside our website. When you visit our social media presence on LinkedIn, your personal data is collected, used, and stored not only by us, but also by the operator of the LinkedIn social network. This also happens if you do not have a profile on the social network yourself. The individual data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily traceable to us. For details on the collection and storage of your personal data and the nature, scope, and purpose of its use by the social network operator, please refer to the privacy policy for the LinkedIn social network, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. You can view this here.

When visiting our social media presence, personal data from visitors registered with LinkedIn as well as those not registered is processed. You use the LinkedIn social network and its functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., sharing, rating).

We process the following data from registered visitors to our social media presence:

  • User ID or username under which you have registered;
  • Shared profile data (e.g., name, occupation, addresses, contact details, and, where applicable, special categories of personal data such as religious affiliation, health data, etc.)
  • Data generated when sharing content, exchanging messages, and communicating;
  • Data required in the context of contract initiation and processing at the request of registered visitors.

Otherwise, we only process pseudonymized data such as statistics and insights into how our social media presence and the content provided on it are interacted with, as well as evaluations of the success and background of our advertisements. We cannot merge the pseudonymized data ourselves with the corresponding identification feature (e.g., name details). This means that we are unable to identify individual visitors, who therefore remain anonymous to us.

We process this data on the following legal bases:

  • If you use our social media presence on LinkedIn to contact us, we will process the data you provide to us exclusively for the purpose of contacting you. The legal basis for data collection is therefore either your consent in accordance with Art. 6 (1) (a) GDPR or Art. 6 (1) (b) GDPR, provided that your request relates to an existing contractual relationship with you or you are interested in concluding a contract and contact us.
  • Otherwise, data processing is based on our legitimate interest in simplifying communication and data exchange and optimizing our social media presence in accordance with Art. 6 (1) (f) GDPR.

We kindly ask you not to send us any personal data of special categories within the meaning of Art. 9 (1) GDPR without being asked to do so. If you do so, we will only process this data, if at all, on the basis of your express consent in accordance with Art. 9 (2) (a) GDPR or if you have obviously made it public in accordance with Art. 9 (2) (e) GDPR.

Only our employees and service providers who manage our social media presence and need the data for the above-mentioned purposes have access to the data we process. If the data subjects post their data publicly on our social media presence, it can be accessed by other registered and, in some cases, unregistered visitors, including those from third countries.

Joint controllers

When you visit our social media page, we are jointly responsible for processing your data with the operator of the LinkedIn platform in accordance with Art. 26 GDPR. To guarantee your rights and in accordance with the provisions of the GDPR, we have concluded an agreement within the meaning of Art. 26 (1) GDPR, which sets out rules for the processing of your personal data. Further information on our joint responsibility can be found in this agreement at the following link.

You can contact the company LinkedIn regarding the processing of your data and assert your rights. More detailed information about your rights can be found below in this privacy policy. In addition, pursuant to Art. 22 (1) GDPR, you have the right not to be subject to automated individual decision-making. If such automated individual decision-making is permissible under Article 22(2)(a) to (c) GDPR, you have the right under Article 22(3) GDPR to obtain human intervention on the part of the controller, to express your own point of view, and to contest the decision.

7. Contacting us for application purposes

We are delighted that you are interested in working for us. If you contact us for this purpose via the email address career@batemo.de, we will process the personal data you provide in this context, such as your name, address, contact details, and the personal data provided in your application documents, solely for the purpose of effectively and correctly handling the application process and for the purpose of contacting you during the application process. The data will not be passed on to third parties unless you give your consent.

We also process data that we have obtained in a permissible manner from publicly accessible directories (e.g., professional networks).

This data is processed in accordance with Art. 88 (1) GDPR in conjunction with § 26 BDSG. If you voluntarily provide information other than that requested by us, the processing of your corresponding personal data is based on your consent in accordance with Art. 6 (1) (a) GDPR.

We ask you not to send us any personal data of a special category within the meaning of Art. 9 (1) GDPR in your application documents or in any other contact. If you do so, we will only process this data, if at all, on the basis of your express consent in accordance with Art. 9 (2) (a) GDPR, which you gave us prior to sending your application documents.

8. Deletion or blocking of data

We adhere to the principles of data avoidance and data minimization. Therefore, we only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the storage periods stipulated by law. Please note that numerous legal retention obligations require that data must continue to be stored (e.g., under the German Commercial Code or the German Fiscal Code). If there are no further retention obligations, the data will be routinely blocked or deleted in accordance with the statutory provisions once the respective purpose has ceased to apply or these periods have expired. Your personal data will also be deleted after you have effectively asserted your right to object to the processing and after you have revoked your consent, provided that there is no other legal basis for the processing.

9. Recipients of the data / categories of recipients

We ensure that only those persons who need your personal data to perform their tasks receive it. In many cases, we are supported by the service providers named in this privacy policy, whom we have carefully selected and commissioned within the framework of order processing in accordance with Art. 28 GDPR. These service providers are bound by our instructions and are regularly monitored by us. Otherwise, no data is passed on to third parties unless we are obliged to do so by mandatory legal provisions, in particular to external bodies such as supervisory authorities or law enforcement agencies.

10. Transfers to Third Countries

We transfer your personal data to service providers outside the European Economic Area (“third countries”) as specified in this privacy policy. Data is only transferred to third countries if this is necessary for the performance of a contractual obligation, if it is required by law, or if you have given us your consent to do so.

The European Commission certifies that some third countries have data protection standards comparable to those of the European Economic Area through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here).

11. Your Rights

You have the right to access, rectify, erase, and restrict the processing of your data, as well as the right to data portability. If you have given us your consent, you have the right to withdraw your consent at any time. However, withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

Right to object: If we process your personal data on the legal basis of balancing interests pursuant to Art. 6 (1) (f) GDPR and this is done for direct marketing purposes, you have the right to object to this at any time; this also applies to profiling insofar as it is related to such direct marketing. We will then no longer process your data for these purposes. If we process your data for other purposes on the basis of a balancing of interests, you have the right to object on grounds relating to your particular situation. We will then no longer process the personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Supervisory authority responsible for us: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg Prof. Dr. Tobias Keber Heilbronner Straße 35 70191 Stuttgart

12. Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.