Privacy Policy

We appreciate your visit to our website and your interest in our company and our services. Protection of your personal data is very important to us. Below, we provide information about what personal data we process when you use our website, for what purposes this is done, the legal basis for the processing, and what rights you have.

Personal data refers to any information relating to an identified or identifiable natural person. This includes name, address, email address, phone number, IP address, or usage behavior on a website.

The data controller within the meaning of Article 4(7) of the GDPR is:

Bauer Solar GmbH
Hinter der Mühl 2
55278 Selzen

Phone: +49 (0) 6737 80810
Fax: +49 (0) 6737 808166
Email: datenschutz@bauer-solar.de

A Data Protection Officer has been appointed for our company.

You can contact our Data Protection Officer by email at datenschutz@bauer-solar.de or by mail at our address listed above, with the note “Data Protection Officer.” Incoming inquiries will be forwarded immediately to the Data Protection Officer.

You have the following rights regarding your personal data:

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

To the extent that we process your personal data based on your consent, you may withdraw this consent at any time with future effect. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

You may revoke your consent via the settings of our cookie consent tool or by email to datenschutz@bauer-solar.de.

To the extent that we process your personal data based on legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing at any time for reasons arising from your situation.

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes.

We use SSL or TLS encryption on our website to protect your data during transmission. You can recognize an encrypted connection by the fact that the address bar of your browser begins with “https://” and by the lock icon in your browser bar.

Furthermore, we take appropriate technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties.

The provision of personal data is neither legally nor contractually required. You are not obligated to provide us with personal data. However, without the provision of certain data, individual functions of our website may be limited.

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

For the processing operations we carry out, we specify below how long personal data is stored or when it is deleted.

Unless an explicit retention period is specified below, we delete personal data as soon as the respective purpose of the processing no longer applies and there is no legal retention obligation or other legal basis for further storage.

Longer storage may occur if this is necessary to assert, exercise, or defend legal claims, if there is an impending legal dispute or other legal proceedings, or if statutory retention obligations apply, in particular under Section 257 of the German Commercial Code (HGB) or Section 147 of the German Fiscal Code (AO).

Upon expiration of statutory retention periods, personal data will be deleted unless further storage is necessary and legally permissible.

Within our company, only those departments that require personal data to fulfil their respective purposes are granted access to it.

In addition, we engage external service providers, for hosting, IT operations, IT security, form and communication processes, as well as for the technical provision of individual functions of our website and the specialist partner portal. To the extent that these service providers process personal data on our behalf, this is done based on data processing agreements in accordance with Article 28 of the GDPR.

Disclosure to other third parties, in particular government agencies, tax advisors, legal advisors, banks, insurance companies, or other recipients, occurs only to the extent permitted by law, you have consented, it is necessary for the performance of a contract, we are legally obligated to do so, or the disclosure is necessary for the assertion, exercise, or defense of legal claims.

If personal data is transferred to countries outside the European Union or the European Economic Area, this is done only in compliance with legal requirements. Where necessary, appropriate safeguards, in particular standard contractual clauses, are implemented.

This Privacy Policy is current as of May 2026.

Due to technical advancements, changes to our website, or amended legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current version published on this website applies in each case.

When using our website for informational purposes, when you do not otherwise transmit information to us—the personal data that your browser transmits to our server is temporarily collected and processed. This includes the following data:

The processing of this data is technically necessary to display our website to you and to ensure its stability and security.

The legal basis is Art. 6(1)(f) GDPR.

Our website is hosted by an external service provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur

The personal data collected via this website is processed on the host’s servers to the extent necessary for the provision of the website.

The legal basis is Art. 6(1)(f) GDPR.

Hosting serves to ensure the secure, fast, and efficient provision of our online services.

To the extent that personal data is processed on behalf of a client, a data processing agreement exists in accordance with Art. 28 GDPR.

We use the Borlabs Cookie consent management tool on our website to obtain, manage, and document your consent for the use of cookies and similar technologies.

The provider is:

Borlabs GmbH
Rübenkamp 32
22305 Hamburg

In particular, your consent decision, the time of the decision, the selected preferences, an identification code, language settings, and technical information regarding the browser and device may be processed.

The legal basis for storing and retrieving the information required for this purpose is Section 25(2) of the German Telemedia Act (TDDDG), to the extent that this is technically necessary to provide the consent management you have requested. To the extent that personal data is processed in connection with the documentation of consents, this is done based on Article 6(1)(c) of the General Data Protection Regulation (GDPR).

Our website uses cookies and similar technologies. These are small text files or other technologies that are stored on your device or read information from your device.

Technically necessary cookies and technologies are required to provide the website and its basic functions.

Analytics and marketing technologies are only used if you have previously given your consent.

To the extent that information is stored on your device or accessed from your device, this is governed by § 25 TDDDG. The subsequent processing of personal data is based on Article 6(1)(f) of the GDPR for technically necessary technologies and on Article 6(1)(a) of the GDPR for technologies requiring consent.

You may revoke or adjust your consent at any time with future effect via the settings of our cookie consent tool.

When you contact us, for example via email, telephone, fax, or a form provided on the website, we process the data you provide to handle your inquiry.

This may include your name, contact details, the content of your inquiry, company information, and any other information you voluntarily provide.

Processing is based on Article 6(1)(b) of the GDPR if your inquiry is aimed at entering into or performing a contract; otherwise, it is based on Article 6(1)(f) of the GDPR.

When you apply for a position with us, we process the personal data you provide as part of your application, including master data, contact information, details regarding your qualifications, application documents, and any other information you provide.

Processing is carried out for the purpose of conducting the application process.

The legal basis is Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1)(b) of the GDPR; where necessary, processing may additionally be based on Article 6(1)(f) of the GDPR.

To the extent that special categories of personal data are processed, this is done only to the extent permitted by law.

If you are not hired, we generally delete your application documents six months after the conclusion of the application process, unless longer storage is necessary to defend against potential legal claims or you have consented to longer storage.

We use Bitrix24 to manage inquiries and in connection with quote and application forms.

The provider is:

Bitrix24 Limited
Poseidonos 1
Ledra Business Center
Egkomi 2406
Nicosia
Cyprus

Bitrix24 can be used in particular for the structured collection and further processing of inquiries and applications.

In addition, we use Bitrix24 in connection with our specialist partner portal “Portal+,” to provide downloadable content. In this context, it may be necessary for users to be redirected to content in the Bitrix Cloud via corresponding links.

When accessing such content, the provider may process technically necessary access data, particularly the IP address, the time of access, and information about the browser and device used.

Processing is carried out based on Art. 6(1)(b) GDPR, insofar as it is necessary for the implementation of pre-contractual measures or for processing your inquiry or within the framework of cooperation with our specialist partners; otherwise, based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient organization of our business processes as well as the structured provision of information and documents.

To the extent that personal data is processed on behalf of a client, this is done based on a data processing agreement pursuant to Article 28 of the GDPR.

We use Zapier to automate and connect individual web applications and form processes.

The provider is:

Zapier, Inc.
548 Market St.
San Francisco, CA 94104
USA

Zapier is used to automatically transfer data from website forms to downstream systems.

Processing is based on Article 6(1)(b) of the GDPR to the extent that it is necessary to process your inquiry or application; otherwise, it is based on Article 6(1)(f) of the GDPR.

To the extent that personal data is transferred to third countries, this is done only in compliance with legal requirements and based on appropriate safeguards.

We provide the specialist partner portal “Portal+” on our website. Through the portal, our specialist partners can register, log in, manage their data, register modules, and upload the necessary documents, in particular delivery notes.

As part of the registration and use of the portal, we process the data provided by the specialist partners or their contact persons. This may include name, company, contact details, login credentials, registration data, information regarding the registered modules, and uploaded documents.

Processing is carried out for the purpose of providing and managing the specialist partner portal, conducting cooperation with our specialist partners, registering modules, and processing transactions transmitted via the portal.

The legal basis is Article 6(1)(b) of the GDPR, insofar as the processing is necessary for the implementation of pre-contractual or contractual measures with our specialist partners. Insofar as personal data of contact persons or employees of our specialist partners is processed, the processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the efficient organization of cooperation with our specialist partners, the administration of module registrations, and the provision of a secure portal area.

Bitrix24 or the Bitrix Cloud may be used for certain functions of Portal+, particularly for the provision of downloadable content. Further information on this can be found in the “Bitrix24” section.

Google Analytics

We use Google Analytics, a web analytics service to evaluate user behavior on our website.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics enables us to analyze the behavior of website visitors and continuously improve our online offering.

Use is based exclusively on your consent.

The legal basis for storing and reading information on your device is Section 25(1) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR.

You may revoke your consent at any time with future effect via our Cookie Consent Tool.

To the extent that personal data is transferred to third countries, this is done only in compliance with legal requirements and based on appropriate safeguards.

We use Meta Pixel on our website.

The provider is:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

With the help of the Meta Pixel, we can track whether users perform certain actions on our website after clicking on an ad and evaluate the effectiveness of our campaigns.

Use is based exclusively on your consent.

The legal basis for storing and reading information on your device is Section 25(1) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR.

Please note that Meta may also process personal data for its own purposes. We have only limited influence over this process.

To the extent that data is transferred to third countries, this is done only in compliance with legal requirements and based on appropriate safeguards.

We use Microsoft Advertising to evaluate the effectiveness of our advertising campaigns.

The provider is:

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

To the extent that Microsoft Advertising is integrated into the website, information regarding website usage, interactions, and conversions may be processed.

Use is based exclusively on your consent.

The legal basis for storing and reading information on your device is Section 25(1) of the TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) of the GDPR.

To the extent that personal data is transferred to third countries, this is done only in compliance with legal requirements and based on appropriate safeguards.

Analytics and marketing services are only activated once you have given your consent via the Cookie Consent Tool.

You may withdraw or modify your consent at any time with future effect via the settings of the Cookie Consent Tool.