Privacy Policy
© 2025 Basabas GmbH, all rights reserved
(As of: June 4, 2025)
1. Controller
Basabas GmbH
Sebastian Zörb
Kirchpfad 17, 35398 Gießen
Telephone: +49 6403 97274210
Email: info@basabas.de
(A data protection officer has not been appointed, as there is no designation requirement under Art. 37 GDPR.)
2. General Principles
We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (new BDSG), and all relevant special laws. Legal bases are Art. 6(1)(a), (b), (c), and (f) GDPR; for end device information additionally § 25 TTDSG.
3. Hosting & Shop System
Our website is operated by a hosting provider in Germany and uses a shop system. When the page is accessed, log files (IP address, date/time, referrer URL, user agent) are stored. Processing is based on our legitimate interest in the stability and security of the website (Art. 6(1)(f) GDPR) and is deleted after 30 days.
4. Cookies & Consent Manager
We use a consent manager.
- Technically necessary cookies (e.g., shopping cart, CSRF token) are processed based on Art. 6(1)(b) GDPR.
- Technically unnecessary cookies (e.g., web analytics) are set only after your consent (Art. 6(1)(a) GDPR in conjunction with § 25 TTDSG).
You can adjust your selection at any time via the “Cookie Settings” button.
5. Web Analytics
To improve our offering, we use a web analytics provider. Pseudonymized usage statistics are created. Processing occurs only if you have previously consented (Art. 6(1)(a) GDPR). You may revoke your consent at any time in the cookie settings.
6. Newsletter
If you subscribe to our newsletter, we transfer your data to a newsletter provider. Subscription is via double opt-in. Basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in each email.
7. Payment Processing
| Category | Purpose / Processed Data | Legal Basis | Automated Decision-Making |
| Payment Service Provider | Payment processing, fraud and credit checks; payment amount, billing/shipping address, email, IP | Art. 6(1)(b) GDPR (contract) | No |
| Bank Processing (Advance Payment) | Booking of your transfer | Art. 6(1)(b) GDPR | No |
| Credit Agency (Credit Check for Invoice Purchase) | Checking your creditworthiness using score values | Art. 6(1)(f) GDPR in conjunction with § 31 BDSG |
Yes* |
*For invoice purchases, we use an automated decision to grant the payment method. You may challenge this decision and present your position (Art. 22(3) GDPR).
8. Shipping Logistics
To deliver your order, we share your name, address, and, if necessary, your email address with shipping providers (Art. 6(1)(b) GDPR).
9. Inventory Management
We use an inventory management system (ERP), which acts as a processor under Art. 28 GDPR. Customer, order, and return data are stored there and, if legally required, archived for up to 10 years.
10. Contact Form / Email
When you contact us, we process your information exclusively to handle your request (Art. 6(1)(b) GDPR). Data is deleted no later than 12 months after the end of communication.
11. Social Media Profiles
We maintain presences on social media platforms. When visiting, the privacy and cookie rules of the respective platform operators apply. For so-called insights data, there is joint responsibility under Art. 26 GDPR.
12. Data Retention
We delete or anonymize personal data as soon as the purpose ceases, unless legal retention obligations or overriding legitimate interests oppose this.
13. Your Rights
You have the right to
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
You may lodge a complaint with a data protection supervisory authority at any time (Art. 77 GDPR).
14. Data Security
We protect your data through TLS encryption, firewalls, role-based access controls, and regular security updates. Backups are stored encrypted, and our employees are contractually bound to confidentiality.
15. Changes to this Policy
We reserve the right to adapt this privacy policy to changed technical or legal conditions. The version published here applies to your next visit.