Privacy policy
1. Introduction
With the following information, we would like to provide you as the “data subject” with an overview of the processing of your personal data by us and your rights under data protection laws. In principle, our website can be used without entering any personal data. However, if you wish to use special services provided by our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no statutory legal basis for such processing, we generally obtain consent from you.
The processing of personal data, such as your name, address, or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to “bauchgefühl GmbH”. By means of this privacy policy, we would like to inform you about the scope and purpose of the personal data collected, used, and processed by us.
As the controller responsible for processing, we have implemented numerous technical and organizational measures to ensure the most complete possible protection of personal data processed via this website. Nevertheless, internet-based data transmissions can, in principle, have security gaps, meaning that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, such as by telephone or post.
2. Controller
The representative of the controller is Ms. Britta Benzenhöfer. Controller within the meaning of the GDPR is:
bauchgefühl GmbH
Dolivostraße 9, 64293 Darmstadt, Deutschland
Telefon: +49 (0)6151 159 120
E-Mail: info@bauchgefuehl.com
3. Data Protection Officer
You can contact our Data Protection Officer directly at any time with any questions and suggestions regarding data
protection:
Markus Sextro
Telefon: +49 (0)6151 352 883 2
E-Mail: datenschutz@snsconnect.de
4. Technology
4.1 Hosting by IONOS
We host our website with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as IONOS).
When you visit our website, your personal data (e.g., IP addresses in log files) is processed on IONOS servers.
The use of IONOS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation,
provision, and securing of our website.
We have concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with IONOS. This is a contract
required by data protection law, which ensures that IONOS processes the personal data of our website visitors only
according to our instructions and in compliance with the GDPR.
For more detailed information, see the IONOS Privacy Policy
4.2 WordPress (Content Management System)
On our website, we use the Content Management System (CMS) WordPress, provided by Automattic Inc., 60 29th Street 343, San Francisco, CA 94110, USA.
We use WordPress CMS to technically provide our website and efficiently manage content. WordPress enables us to create, update, and publish pages and posts in a structured manner without requiring individual programming for everychange. Furthermore, WordPress supports the centralized maintenance of media content (e.g., images and documents) and the consistent display of content across various devices. This allows us to keep our website continuously up to date, organize content clearly, and continuously improve user-friendliness.
Among other things, the following data may be processed:
- IP address
- Technical browser and device information
- Server log data (e.g., time of access, requested file)
- Cookies required for the operation of the website (e.g., session cookies, login cookies)
- Personal data that may be collected through individual features used (e.g., comment function, forms, user accounts)
The legal basis for processing is generally Art. 6(1)(f) GDPR (legitimate interest in a functional, secure, and technically efficient provision of our website). Insofar as consent is required through certain features of WordPress or plugins used therein, such as when using cookies or filling out forms, processing is carried out on the basis of Art. 6(1)(a) GDPR. Consent given can be revoked at any time with effect for the future.
Personal or pseudonymous data is stored only as long as necessary to achieve the stated purposes or as required by
statutory retention periods; thereafter, it is erased or anonymized.
This US company is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Art. 45 GDPR is therefore present, so that a transfer of personal data may take place even without further guarantees or additional measures.
Further information on data protection at WordPress
5. Cookies
When visiting our website, the cookie “wp-wpml_current_language” is set. This cookie serves exclusively to store the language selected by the visitor (German or English) for the duration of the active session and is not used for analysis, marketing, or tracking purposes.
6. Application Management
We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing may also be carried out electronically. This is particularly the case when an applicant submits corresponding application documents to us electronically, for example by email or via a web form located on the website. If we conclude an employment or service contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If no contract is concluded with the applicant by us, the application documents will be automatically erased six months after notification of the rejection decision, provided that no other legitimate interests on our part preclude erasure. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
The legal basis for processing your data is Art. 6(1)(b), 88 GDPR in conjunction with Section 26(1) of the Federal Data
Protection Act (BDSG).
7. Our Activities in Social Networks
In order to communicate with you on social networks and inform you about our services, we maintain our own pages there. When you visit one of our social media pages, we are jointly responsible for the processing operations triggered thereby within the meaning of Art. 26 GDPR together with the provider of the respective social media platform.
We are not the original provider of these pages, but merely use them within the scope of the possibilities offered to us by the respective providers. Therefore, as a precaution, we point out that your data may also be processed outside the European Union or the European Economic Area. Use may therefore involve data protection risks for you, as the safeguarding of your rights (e.g., to information, erasure, objection, etc.) could be rendered more difficult and processing in social networks often occurs directly for promotional purposes or for the analysis of user behavior by the providers, without this being influenced by us. If user profiles are created by the provider, cookies are frequently used or the usage behavior is assigned to your own created member profile of the social networks.
The described processing operations of personal data take place pursuant to Art. 6(1)(f) GDPR based on our legitimate interest and the legitimate interest of the respective provider to communicate with you in a modern way or to inform you about our services. If you are required by the respective providers to give consent to data processing as a user, the legal basis refers to Art. 6(1)(a) GDPR in conjunction with Art. 7 GDPR.
Since we do not have access to the data repositories of the providers, we point out that you can best assert your rights (e.g., to information, rectification, erasure, etc.) directly with the respective provider. Further information on the processing of your data in social networks is listed below for each social network provider used by us:
7.1 Instagram
(Joint) Controller for data processing in Germany:
(Joint) Controller for data processing in Germany: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Meta (Instagram) reserves the right to process content from adult users in the EU, such as photos, posts, or comments, to train its own AI models. We, as a company, have no influence on this specific data processing by Meta. The basis is a legitimate interest pursuant to Art. 6(1)(f) GDPR. We have explicitly objected to the use of our content by Meta for training AI.
7.2 LinkedIn
(Joint) Controller for data processing in Europe:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
7.3 TikTok
(Joint) Controller for data processing in Germany:
(Joint) Controller for data processing in Germany: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
7.4 XING
(Joint) Controller for data processing in Germany:
New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
Submit XING Data Subject Request
7.5 Contests / Sweepstakes in Social Networks
We support our customers in conducting contests/sweepstakes on social media platforms. When personal data is processed in this context, the processing takes place exclusively on behalf of and according to the instructions of the respective customer as the controller within the meaning of the GDPR. In these cases, we act as a data processor pursuant to Art. 28 GDPR.
Participation in the contests generally takes place via the respective social media platform. Personal data is processed by us only to the extent necessary for the implementation and handling of the respective contest. Contact details and shipping addresses are regularly collected only in the event of a win and used exclusively for prize delivery.
If dispatch is carried out by the respective customer, the data required for this purpose is transmitted to them in encrypted form. If dispatch is carried out by a shipping service provider, the required data is passed on exclusively for the purpose of delivery.
For each contest, we refer to the respective terms and conditions of participation and privacy notices of the responsible customer, which explain the processing of personal data in connection with the respective contest in more detail.
The personal data processed by us within the framework of data processing on behalf is generally erased eight weeks after the determination and notification of the winners, provided that no statutory retention obligations conflict therewith or the controller gives us a deviating instruction.
8. Names, Photos, and Videos for Marketing Purposes
If natural persons are mentioned by name or identifiably depicted as the main motif in our published offerings, this is done on the basis of informed consent from the person concerned.
The photographs used are either created by ourselves or legally acquired or licensed from the providers named below:
Britta Hüning
fotorismus
Am Hexenturm 9
64832 Babenhausen, Deutschland
Kristin Schnell
Photographer
Fischers Allee 42
22763 Hamburg, Deutschland
Shutterstock, Inc.
350 Fifth Avenue, 21st Floor
New York, NY 10118, USA
Adobe Canada Services Corporation (formerly Fotolia)
345 Park Avenue
San Jose, CA 95110-2704, USA
Getty Images Deutschland GmbH
Rosenheimer Straße 143c
81671 München, Deutschland
9. Your Rights as a Data Subject
9.1 Right to Confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
9.2 Right of Access (Art. 15 GDPR)
You have the right to obtain from us free of charge, at any time, information about the personal data stored about you, as well as a copy of this data in accordance with statutory provisions.
9.3 Right to Rectification (Art. 16 GDPR)
You have the right to demand the rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.
9.4 Right to Erasure / Right to be Forgotten (Art. 17 GDPR)
You have the right to demand that personal data concerning you be erased immediately, provided that one of the legally foreseen reasons applies and to the extent that processing or storage is not necessary.
9.5 Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request from us the restriction of processing if one of the statutory conditions is met.
9.6 Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1) (a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means, unless processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, in exercising your right to data portability pursuant to Art. 20(1) GDPR, you have the right to have personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of others.
9.7 Right to Object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) GDPR.
This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
In individual cases, we process personal data to operate direct marketing. You can object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling to the extent that it is related to such direct advertising. If you object to processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you are free to exercise your right to object by automated means using technical specifications.
9.8 Right to Withdraw Data Protection Consent
You have the right to withdraw consent to the processing of personal data at any time with effect for the future.
9.9 Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority responsible for data protection concerning our processing of personal data.
10. Currency and Changes to the Privacy Policy
This privacy policy is currently valid and has the status as of: July 2026.
Due to the further development of our website and offerings or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed out by you at any time on the website at “https://www.bauchgefuehl.com/datenschutzerklaerung/”.
This privacy policy was created with the support of the data protection software audatis MANAGER.