Privacy Policy

1. Controller

Bavaria Investments GmbH
Südliche Münchner Straße 2
82031 Grünwald
Germany
Email: [email protected]
Telephone: +49 (0) 89 7007 425-70

2. Website access and hosting

When the website is accessed, technically necessary connection data is processed. This may include IP address, date and time, requested file, transferred data volume, referring URL, browser type, operating system and HTTP status. Processing is necessary to provide the website securely and reliably, detect attacks and resolve technical errors. The legal basis is Article 6(1)(f) GDPR.

The website is delivered using Cloudflare services. Cloudflare may process connection and security data and, where required, transfer it to affiliated companies or technical locations outside the European Economic Area. Such transfers are made on the basis of the applicable safeguards, in particular adequacy decisions or standard contractual clauses.

3. Contact by form or email

When you contact us through the contact form or by email, we process the information you provide. The contact form collects your first name, surname, phone number and email address; an email may also contain any contact details and information you choose to provide. Processing is carried out to review and respond to your enquiry. The legal bases are Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) GDPR for other enquiries.

Please do not include identity documents, banking information or other highly confidential data in an initial enquiry.

4. Cookies, analytics and advertising

The website stores your cookie choice exclusively in a necessary first-party cookie. The cookie contains only the selected consent level and is deleted after 180 days. Further information is available in the cookie policy.

With your consent, Bavaria Investments may transmit conversion events to Google Ads from its server to measure advertising performance. Depending on the conversion, the data processed may include the conversion time and type and advertising-interaction identifiers such as a Google Click ID. The website does not load an optional Google Ads tracking script in the browser for this purpose. The legal basis for this optional processing is Article 6(1)(a) GDPR.

5. Recipients

Personal data is available only to persons and service providers who need it to deliver the website or respond to your enquiry. These may include hosting, IT security and email providers. If you consent to optional conversion measurement, Google as the provider of Google Ads may receive the conversion data described above. Data is not disclosed for advertising or measurement without a separate legal basis or consent.

6. Retention

Connection data is retained only for as long as necessary for security, error analysis and legal obligations. The cookie recording your consent choice is deleted after 180 days. Contact enquiries are deleted when processing is complete unless statutory retention duties or legitimate interests require continued storage. Conversion data sent to Google Ads is additionally subject to the settings and retention rules applicable there.

7. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability and objection. Consent may be withdrawn at any time with future effect. Contact the controller at the address above to exercise your rights.

8. Right to complain

You may lodge a complaint with a data-protection supervisory authority. The authority generally responsible at the company's registered office is the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access. Data transmission will use HTTPS encryption when the website is published on its final domain.

10. Changes

This Privacy Policy will be updated if the website, services used or legal requirements change.