Privacy policy

The controller for data processing is: Bauer365 GmbH Im Grund 4 74199 Untergruppenbach Germany Represented by: Michael Bauer, Holger Bauer Email: info@bauer365.de Phone: +49 1556 0151 001

• Account/company data (name, legal form, address, VAT ID, contact person, email, phone) • Assessment/compliance information you provide and evidence documents you upload • Customer ratings (stars/text) • Usage data (e.g. profile views in the directory) • Server log data: IP address, timestamp, requested path, status code, user agent and referrer (Art. 6(1)(f) GDPR – operation and security); query parameters are masked and retention follows the server's log rotation. API requests are additionally stored with the IP address for 30 days. • Billing data for paid plans (via our payment provider)

We process data to provide the platform (contract, Art. 6(1)(b) GDPR), to comply with legal obligations (lit. c) and based on legitimate interests (lit. f), e.g. for security and abuse prevention. We obtain consent (lit. a) where required.

• Hosting/infrastructure: dogado GmbH, Antonio-Segni-Strasse 11, 44263 Dortmund, Germany. Operations take place exclusively in German data centres. • Database and object storage for evidence documents: operated by us on the infrastructure named above – no disclosure to further service providers takes place in this respect. • Payment processing: currently not active, as paid plans have not been enabled yet. As soon as a payment provider is integrated, it will be named here. • Email delivery: via the infrastructure named above; no additional external delivery provider is used. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. No personal data is transferred to third countries outside the EU/EEA.

We use only technically necessary cookies (login session, language and theme preference). There is no tracking or advertising analytics; therefore no cookie consent is required.

Companies listed as suppliers are visible in the directory to logged-in, entitled buyers. The accuracy of a company's own information and evidence is its own responsibility. Visibility can be disabled in the profile.

We retain data for as long as your account exists or as long as necessary for the stated purposes or statutory retention obligations.

You have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. You can initiate access and erasure yourself in the settings (data export / delete account).

For privacy requests, contact us at info@bauer365.de or by post at the address given above.