Data protection
Privacy policy
This page transparently explains which personal data are processed when you visit our website or submit a product inquiry.
Version: 26.07.2026 · Version: 2026-07-26-2
1. Controller
Günter Ballbach Messzeuge GmbH & Co. KGAuf der Härte 9–11
72213 Altensteig-Spielberg
Germany
Phone: +49 (0)7453 9475-0
E-Mail: info@ballbach-messzeuge.de
Represented by its general partner Günter Ballbach Verwaltungs-GmbH, Managing Director Andreas Graef.
2. Website provision and hosting
Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When a page is accessed, the web server processes technically required connection data, in particular the requested page or file, access time, browser type and version, operating system, device type, referrer URL and an anonymised IP address.
Processing is used to ensure secure, stable and error-free operation and to defend against abusive access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure operation of our website. IONOS states that web-hosting log data are retained for eight weeks. A data processing agreement is in place with IONOS.
3. IONOS WebAnalytics
Where the standard IONOS web analysis is active in the hosting plan, evaluation is based on anonymised log data or pixel counting. According to IONOS, no cookies are used and IP addresses are anonymised immediately. The evaluation is used solely for statistical information and technical improvement of our website. The legal basis is Art. 6(1)(f) GDPR.
In addition, we keep our own purely aggregated view statistics for the home page and product pages. Only the date, page type or product family and the number of views are stored. IP addresses, cookies, browser identifiers, referrers or other visitor identifiers are not stored for this purpose.
4. Cookies and local storage
This website does not use analytics, advertising or marketing cookies. Therefore, no consent banner is currently displayed. Only technically necessary storage is used for a function expressly requested by you or for website security.
| Name | Purpose and content | Duration |
|---|---|---|
ballbachInquiryCartV1Local Storage |
Stores selected products, quantities and optional item notes for the inquiry cart solely in the browser. Contact details are not stored there. | 30 days after the last change; earlier after successful submission or manual deletion of browser data. |
Ballbach.AntiforgeryCookie |
Security cookie protecting forms against unauthorised cross-site submissions. It contains no inquiry or contact data. | Browser session |
Ballbach.AdminCookie |
Login cookie used only for authorised staff in the protected administration area. It is not set for ordinary website visitors. | Up to 8 hours, extended on continued use |
Access to the terminal device is based on Section 25(2)(2) TDDDG. Subsequent processing is based, depending on the function, on Art. 6(1)(b) or (f) GDPR.
5. Inquiry cart and product inquiries
When you submit an inquiry, we process company, name, email address, optionally telephone number and message, selected products, quantities and item notes, page language, and the time and version of the privacy notice acknowledged.
We need the fields marked as required in order to assign and answer the inquiry. There is no legal obligation to provide them; without these details, however, we cannot process the inquiry through the form. Telephone number, general message and item notes are optional.
The data are processed to review and answer the inquiry, prepare a quotation and take pre-contractual steps. The legal basis is Art. 6(1)(b) GDPR. For contacts acting for a company, Art. 6(1)(f) GDPR may additionally apply; our legitimate interest is handling the business inquiry. Submission of an inquiry alone does not result in use for newsletters or general promotional mailings.
Access is limited to responsible staff and processors used for hosting and email operation where technically necessary. Inquiries that do not result in an order are generally deleted no later than twelve months after processing is completed, unless legal claims, consent or statutory retention obligations require otherwise. Where a business relationship arises, records relevant under commercial and tax law are retained for the statutory periods.
6. Business credit assessment with Creditsafe
Where we assume an economic advance-performance risk, particularly for new customers, higher order values, payment on account or other justified risk indicators, we may obtain a company and credit report before entering into a contract or during an existing business relationship. A check is not carried out merely because a non-binding website inquiry is submitted.
We use Creditsafe Deutschland GmbH, Sonnenallee 221 F, 12059 Berlin. For identification, we may transmit the company name, business address, legal form, registration or VAT data and, where necessary, details of owners, directors or authorised representatives. We may receive company master data, credit scores and recommended credit limits, financial and registry data, payment experiences, insolvency or liquidation information and details of authorised representatives.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are verifying the identity and financial capacity of business partners, avoiding payment defaults and setting appropriate payment terms. We limit checks to cases in which these interests outweigh the interests of the affected persons after balancing the interests involved.
The result may be considered when deciding on contract acceptance, credit limits, advance payment, instalments, security or payment on account. No decision with legal or similarly significant effect is made solely by automated means. A member of staff makes the final commercial decision taking other circumstances into account.
We retain credit information and decision documentation only for as long as necessary for the business relationship, regular risk review or the establishment, exercise or defence of legal claims. Necessity is reviewed regularly. Affected persons may object on grounds relating to their particular situation and may request access to data held by Creditsafe.
7. Contact by email and telephone
When you contact us, we process the contact details and content you provide in order to deal with your request. For contract-related requests the legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR. Data are deleted when the purpose no longer applies and no retention duties or legitimate reasons require continued storage.
8. Recipients, international transfers and external links
We disclose personal data only where required for contract performance, by law or within a processor relationship. Fonts, icons and program libraries are loaded locally from our own server; merely viewing a page does not establish connections to external CDNs, Google or social-media services for these resources. External websites are opened only when you click the relevant link. No transfer to a third country is currently intended for normal website operation.
9. Data security
We use encrypted HTTPS connections and appropriate technical and organisational measures. The administration area is access-protected. Nevertheless, data transmission over the internet can never be completely risk-free.
10. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. Consent may be withdrawn at any time for the future; processing carried out before withdrawal remains lawful.
To exercise your rights, please use the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
11. Automated decisions and changes
No decision with legal or similarly significant effect is made solely by automated means. This also applies to commercial assessment of credit information. We update this privacy policy when functions, service providers or the legal situation change. The version published on this page at the relevant time applies.