Data privacy policy

We take data protection seriously

Protecting your privacy while processing your personal data is an important issue for us. When you visit our website, our web servers store the IP address of your Internet service provider, the website you have come to ours from, our web pages that you visited, as well as the date and duration of your visit. This information is absolutely necessary for the technical transmission of the web pages and secure server operation. Your data is not evaluated on a personal basis.  

If you send data to us via the contact form, this data is stored on our servers when data is being backed up. We use your data exclusively to process your request. Your data is treated strictly confidentially. It is not forwarded to third parties.  

Responsible company:
Baumann GmbH
Oskar-von-Miller-Straße 7
92224 Amberg
Phone: +49 9621 6754-0

Personal Data

Personal data is data about you as a person. This includes your name, your address, and your email address. You do not have to provide any personal data to be able to visit our Internet site. In some cases, we need your name and address as well as other information to be able to offer you the service you desire.

The same applies if we deliver you informational material at your request or if we answer your requests. In these cases, we will always point this out to you. Moreover, we only store the data that you automatically or voluntarily transfer to us.  

If you use one of our services, we generally only gather the data that is necessary to be able to provide the service to you. We may ask you for further information, which is however of a voluntary nature. Any time that we process personal data, we do this in order to be able to offer our services to you or in order to pursue our commercial goals.  

Automatically stored data   

Server log files  

The provider of the web pages automatically collects and stores information in so-called server log files, which your browser transfers to us automatically. This data is:   

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of accessing computer
  • Time of server request
  • IP address

This data is not merged with other data sources. Data is processed in accordance with Article 6(1)(f) GDPR (EU General Data Protection Regulation) on the basis of our legitimate interest in improving the stability and functionality of our website.  

This anonymized data is stored on secure systems, separate from personal data, and cannot be traced back to individual persons. This means that your personal data remains protected at all times. This data is deleted after a maximum of seven (7) days.


When you visit our Internet sites, we may store information on your computer in the form of cookies. Cookies are small files that are transmitted from an Internet server to your browser and saved on your hard drive. Only the Internet protocol (IP) address is stored in this case – no personal data. The information stored in the cookies makes it possible to recognize you automatically the next time you visit our website, making it easier for you to use. The legal basis for the use of cookies is legitimate interest in accordance with Article 6 GDPR.   Of course, you can visit our website without accepting cookies. If you do not want your computer to be recognized on your next visit, you can also reject the use of cookies by changing the settings in your browser to "Reject cookies". The procedure for doing this can be found in the operating instructions of your browser. If you reject the use of cookies, this may however cause restrictions in the use of some areas of our website.


We have implemented technical and administrative safety measures to protect your personal data from loss, destruction, manipulation, and unauthorized access. All of our employees and the service providers that work for us are bound to obey the valid data protection laws.  

Any time we collect and process personal data, it is encrypted before it is transmitted. That means that your data cannot be misused by third parties. Our security precautions are subject to a continuous process of improvement, and our data protection declarations are continually reviewed. Please make sure that you have the most recent version.

Rights of persons affected

At all times, you have the right of access, rectification, deletion, and restriction on processing your stored data, a right to object to processing, as well as a right to data portability and a right to lodge a complaint in accordance with the requirements of the data protection law.

Right of disclosure

You can demand a disclosure from us on whether and to what extent we are processing your data.  

Right of rectification

If we process your data, which is incomplete or incorrect, you can demand its rectification or its completion from us at any time.

Right of deletion

You can demand that we delete your data in as far as this is processed unlawfully or the processing disproportionately interferes with your legitimate interest in protection. Please note that there may be reasons that stand in the way of immediate deletion, e.g. in the case of statutory storage obligations. Independent of the exercise of your right of deletion, we will delete your data immediately and completely as long as there are no contractual or statutory storage obligations that prevent this in this regard.

Right to restriction of processing

You can demand from us the restriction of processing your data if

  • you reject the accuracy of the data, and that for a period of time, which allows us to check that the data is correct.
  • the processing of the data is unlawful, but you reject deletion and instead demand a restriction on the usage of the data,
  • we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
  • you have objected to the processing of the data. 

Right of data portability

You can demand that we provide to you the data you made available to us in a structured, commonly used, and machine-readable format and that you can transmit this data through us to another responsible party without obstruction if

  • we process this data based on a revocable agreement that was given by you or to fulfill a contract between us, and
  • this processing is carried out using automated procedures. If technically feasible, you can demand that we transfer your data directly to another responsible party. 

Right to object

If we process your data for a legitimate reason, you can object to this processing of your data at any time; this would also apply to profiling supported by these provisions. We will then no longer process your data unless we can prove compelling, justifiable reasons for processing, which outweigh your interests, rights, and freedoms or if processing serves the purpose of assertion, exercise, or defense of legal claims. You can object to processing your data for the purposes of direct advertisement at any time without providing reasons.

Right to lodge a complaint

If you are of the opinion that we have a violated German or European data protection law in the processing of your data, we ask you to contact us to clarify your questions. You also naturally have the right to turn to the responsible supervisory authority, i.e. the respective national agency for data protection supervision.
If you want to assert a claim against us in relation to one of the rights listed, please contact our data protection officer. If we have any doubts, we can request additional information confirm your identity.

Newsletter using rapidmail

If you would like to receive the newsletter offered on the website, we need from you an email address and information that allows us to make sure that you are the owner of the email address given and that you have agreed to receive the newsletter. No further data is collected, or further data is only collected on a voluntary basis. We use this data exclusively to send the requested information and do not forward it to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Article 6(1) a. GDPR). You can revoke the consent you gave to store your data and your email address and its use to send the newsletter by following the "Unsubscribe" link in the newsletter. The legality of data processing that has already occurred remains unaffected by this revocation of consent. 
The data from you that we have stored for the purpose of sending the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. email addresses for the member area) will not be affected in this case.        

This website uses rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.
rapidmail is a service that can organize and analyze the sending of newsletters, among other services. The data you have entered for the purposes of subscribing to the newsletter is stored on the rapidmail servers in Germany. 
If you do not want analysis by rapidmail, you will have to unsubscribe from the newsletter. To that end, there is a corresponding link in every newsletter email. You can also unsubscribe from the newsletter on the website itself. 
For analysis purposes, the emails sent using rapidmail contain a so-called “tracking pixel”, which connects to the rapidmail servers when the email is opened. This makes it possible to determine if a newsletter email has been opened. 
Furthermore, with the help of rapidmail we can determine whether any links in the newsletter email have been clicked on, and if so which links. All of the links in the email are so-called "tracking links", which can count your clicks. 
You can find more information on the rapidmail analysis functions in the following
The data is processed exclusively on the basis of your consent (Article 6(1) a. GDPR). You can revoke your consent at any time. The legality of data processing that has already occurred remains unaffected by this revocation of consent. 
The data from you that we have stored for the purpose of sending the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the rapidmail servers after you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. email addresses for the member area) will not be affected in this case.  You can find more information rapidmail's data protection notices
We have concluded an order processing contract with rapidmail in accordance with Article 28 GDPR, in which we have obliged rapidmail to protect the data of our customers and not to forward it to third parties.

Google Maps

This website uses Google Maps to display maps and to create route maps. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
By using Google Maps on this website, you consent to the collection, processing, and use of automatically collected data as well as data you have entered by Google, one of its representatives, or a third-party provider.

The conditions of use for Google Maps can be found here.
You can view the data protection declaration of Google Maps here.  

YouTube in enhanced data protection mode

We use YouTube as a provider to incorporate videos. The videos have been embedded in enhanced data protection mode. Like most websites, YouTube also uses cookies to gather information about visitors to its website. YouTube uses them to collect video statistics, to prevent fraud, and to improve user-friendliness, among other reasons. This also makes a connection to the Google DoubleClick network. When you start the video, this could trigger other data processing procedures. We have no influence on this. You can find more information on data protection at YouTube in the data protection declaration at:

Changes to this data protection declaration

We retain the right to make changes to our data protection declaration if this should become necessary due to new technologies. Please make sure that you have the most recent version. If fundamental changes are made to this data protection declaration, we will make this known on our website.     

All interested parties and visitors to our website can contact us with data protection questions at:  

Matthias Hassler LL.M.
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg 
Phone:  0941 2986930
Fax:  0941 29869316

Data protection notice

This website uses external components such as cards or videos. This information can be used to collect data about your behaviour. Privacy information