Privacy policy

The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other data protection provisions is:

Arthur Schilke, trading under the business name Bathenox, Kölner Str. 286a, 51702 Bergneustadt, Germany
Phone: +49 170 7297725
E-mail: info@bathenox.com

The protection of your personal data is important to us. We process personal data only insofar as this is necessary to provide and securely operate this website, to fulfil legal obligations or to handle an enquiry you have initiated.

Personal data means any information relating to an identified or identifiable natural person. Processing is carried out in accordance with the GDPR, the German Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable data protection provisions.

This website is hosted by Vercel Inc., 650 California St, San Francisco, CA 94108, USA. When the website is accessed, the hosting infrastructure processes technically required data, in particular the IP address, date and time of the request, the address accessed and information about the browser and operating system.

This processing serves the secure, stable and reliable provision of the website. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of our website.

Vercel Inc. is based in the USA. Processing of personal data in the USA can therefore not be ruled out. Vercel is certified under the EU-U.S. Data Privacy Framework. Where required, Vercel additionally provides for the Standard Contractual Clauses adopted by the European Commission for international transfers.

Each time the website is accessed, server log data may be processed automatically. This includes in particular the IP address, date and time of access, the URL accessed, browser type and operating system.

This processing serves the technical provision of the website, error analysis and the assurance of security and stability. We do not combine this data with other data sources. The legal basis is Art. 6 (1) (f) GDPR.

The data is retained only for as long as is necessary for the stated purposes or as provided for by the technical configuration in use. The specific technical retention period depends on the configuration used at Vercel.

According to the current technical state, the website sets exactly one cookie. It stores the language you have selected (German, English or Russian) and is deleted when the browser is closed.

The cookie serves exclusively the technically requested language function and is not used for advertising, analytics or tracking. The storage of and access to the information on the end device is based on Section 25 (2) No. 2 TDDDG. Insofar as personal data is processed in this context, the legal basis is Art. 6 (1) (f) GDPR. No prior consent is required for this technically necessary cookie.

As of the current technical state, no visitor analytics and no tracking take place on this website. In particular, no Google Analytics, no advertising networks, no social media plugins, no external maps and no captcha services are used. No profiling or evaluation of usage behaviour for advertising or marketing purposes takes place.

The fonts used, Inter and Space Grotesk, are delivered locally or via the same technical infrastructure as the website. When visiting the website, no connection to Google Fonts or any other external font service is established for the provision of the fonts.

The videos shown on the website are delivered via the same technical infrastructure as the website. External video platforms such as YouTube or Vimeo are not embedded.

You can reach us through the contact form on this website, by email or via WhatsApp.

Through the contact form we process your name, your email address, the country the goods are going to and the content of your message, as well as the optional details of subject and telephone number. The entries are not stored in a database of this website but sent exclusively as an email to our mailbox. You additionally receive an automatic acknowledgement of receipt with fixed wording at the address you provided.

These emails are sent through the mail server of our provider IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. IONOS processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR; the processing takes place within the European Union. No mail dispatch service outside the EU is used.

To protect the form against abuse, the IP address and the time of submission are held briefly in the server's memory in order to limit the number of submissions per sender and in total. These values are not stored permanently and are not passed on to third parties. No captcha service is used.

This website also carries links to our WhatsApp number. These are plain links; no WhatsApp widget, chat window or WhatsApp script is embedded. Merely opening the website therefore transmits no data to WhatsApp. Only when you click such a link does WhatsApp open and a connection is established to the servers of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you contact us via WhatsApp, we process your phone number, your displayed profile name and the content of your message in order to handle your enquiry. We have no influence over the processing by WhatsApp itself; WhatsApp belongs to the Meta group of companies, and data may also be transferred to the USA. Insofar as personal data is transferred to the USA to correspondingly certified companies of the Meta group, the transfer may take place on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework. Where this does not apply, appropriate safeguards, in particular the Standard Contractual Clauses approved by the European Commission, may be relied upon. If you wish to avoid this transfer, please use the contact form or the email address provided.

Where your enquiry is directed at concluding a contract or relates to an existing contractual relationship, the processing is based on Art. 6(1)(b) GDPR. In other cases it is based on Art. 6(1)(f) GDPR; our legitimate interest lies in handling your enquiry properly. Communication data is deleted as soon as it is no longer required for processing and no statutory retention obligations or other legal grounds stand in the way.

This website currently offers no user accounts or registrations. There is no newsletter, no shopping cart and no payment processing via the website.

Insofar as we obtain your consent for a processing operation, Art. 6 (1) (a) GDPR is the legal basis. For pre-contractual measures or the performance of a contract, Art. 6 (1) (b) GDPR applies. Insofar as a legal obligation exists, Art. 6 (1) (c) GDPR applies. Otherwise, processing may be based on Art. 6 (1) (f) GDPR where a legitimate interest exists and no overriding interests or fundamental rights of the data subject prevail.

Personal data is generally stored only for as long as is necessary for the respective processing purpose. Where statutory retention or documentation obligations exist, the data is retained for their duration and subsequently deleted, unless another legal basis permits further storage.

Vercel Inc. is used as the hosting provider for the technical operation of the website. IONOS SE is used as the mail provider for sending the emails triggered by the contact form. Where service providers process personal data on our behalf, this takes place on the basis of the agreements required under data protection law. If you use the WhatsApp contact route, data is transmitted to WhatsApp Ireland Limited; you trigger that transmission yourself by clicking the link. No further recipients arise from the technical state of the website as currently communicated.

Subject to the statutory requirements, you have in particular the right of access pursuant to Art. 15 GDPR, rectification pursuant to Art. 16 GDPR, erasure pursuant to Art. 17 GDPR, restriction of processing pursuant to Art. 18 GDPR, data portability pursuant to Art. 20 GDPR and objection pursuant to Art. 21 GDPR.

Insofar as processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of the processing carried out until withdrawal remains unaffected.

To exercise your rights, you can contact us using the contact details given above.

Insofar as personal data is processed on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law. The authority with particular responsibility for the registered seat of the controller is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
Phone: +49 211 38424-0
E-mail: poststelle@ldi.nrw.de

We take appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised disclosure or unauthorised access. This includes in particular the encrypted transmission of the website, insofar as this is technically provided.

This privacy policy reflects the currently communicated technical state of the website. If the website is technically or functionally extended, an adjustment may become necessary.

This applies in particular to the introduction of additional analytics or tracking services, a newsletter, external maps or video services, social media plugins or other additional third-party services. Such functions should only be used after a prior data protection review and any necessary adjustment of this privacy policy.