Privacy policy

1. Controller under the GDPR

2. Hosting and server log files

This website is delivered by a hosting provider. Whenever a page is requested, that provider processes technically necessary data transmitted by your browser, in particular IP address, date and time, requested address, referrer and browser information.

To protect against abuse and overload, the number of requests per IP address is briefly limited. This serves the secure and stable operation of the website based on our legitimate interest (Art. 6(1)(f) GDPR).

3. Contact form

If you contact us via the contact form, we process your name, email address, message and, where applicable, the selected topic. The data are transmitted encrypted through a technical service provider that handles enquiries on our behalf and are not used for any other purpose.

The sole purpose is to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. The data are deleted once they are no longer needed and no statutory retention obligations apply.

4. Cookies and consent

On your first visit, a banner asks for your consent. There are two categories: “Necessary” (always active, including embedded videos) and “Statistics”. Without your consent, Statistics is disabled.

Your choice is stored locally in your browser (localStorage, key “baptista.consent”). This storage is required to manage your consent.

You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page. Withdrawal applies to the future.

5. Web analytics

Only if you consent to “Statistics” do we load Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Before that, no connection to Google is made.

Cookies are set and pseudonymous usage data and your truncated IP address are processed. These are pseudonymised, not fully anonymous data. Names, email addresses and message contents are not transmitted to Google.

The legal basis is your consent (Art. 6(1)(a) GDPR). If you withdraw consent, measurement stops immediately.

6. YouTube videos

Videos are embedded via YouTube's privacy-enhanced mode (youtube-nocookie.com, Google Ireland Limited) and loaded when played. Your IP address and device information, among other things, are transmitted to YouTube; YouTube may use cookies or similar technologies.

The embedding serves to present our products and is part of the website (Art. 6(1)(f) GDPR).

7. Interactive 3D model

On the “Montage & Installation” page we embed an interactive 3D model of our self-service car wash via an external service provider. When you open this page, the model loads directly; your IP address is transmitted to the provider because this is technically required to deliver the content.

The embedding serves to present our products clearly (Art. 6(1)(f) GDPR).

8. Transfers outside the EEA

Some of the services named (in particular Google) are based in the USA or access data from there. Google LLC is certified under the EU-US Data Privacy Framework. Other service providers acting for us may also process data in the USA; where required we rely on the European Commission's standard contractual clauses.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)).

You may also lodge a complaint with a data protection authority, for example the Dutch Autoriteit Persoonsgegevens or the authority in your country of residence.

For privacy questions, please contact us using the details above.