Privacy notice

Last updated: 11.09.2026

Controller and contact details

Basabas GmbH, Am Weiher 3, 35398 Gießen, Germany. For data protection matters, you can contact us at info@basabas.de or by telephone on +49 6403 97274 00.

Visiting and shop settings

When you access the website, we process your IP address, the time of access, the content requested, and technical information about your browser and connection in order to provide the website, detect disruptions and prevent misuse. The legal basis is our legitimate interest in secure operation pursuant to Art. 6 para. 1 point f GDPR. Log data is deleted as soon as it is no longer required for these purposes; in the event of specific security incidents, longer retention may be necessary for investigation.

We use technically necessary cookies or comparable storage functions for sessions, the shopping basket, login and requested settings (Section 25 para. 2 no. 2 TDDDG; Art. 6 para. 1 point b or f GDPR). A language or delivery country you select may be stored for future visits. You can change this selection in the shop and delete stored settings in your browser.

For the initial preselection of language and delivery country, we evaluate your browser language and the country derived from your IP address. The country is determined locally on our server; no request containing your IP address is sent to an external geolocation service for this purpose. We do not determine your precise location or create a movement profile. The country information initially remains in the session; the IP address is not stored permanently for this purpose. Manual settings and the data of logged-in customers take precedence. The legal basis is our legitimate interest in an appropriate display and delivery country selection pursuant to Art. 6 para. 1 point (f) GDPR.

Enquiries, customer account and orders

We process the contact, address, account, order and payment data you provide to handle your enquiry, prepare and perform the contract, make deliveries, and process cancellations and claims (Art. 6 para. 1 point (b) GDPR). Required information is marked accordingly. Without this data, we cannot provide the relevant service, or cannot provide it in full. A customer account is not required for guest orders.

To verify VAT-related requirements, we may transmit the VAT identification number, company name and registered address to the competent tax authority and document the verification results (Art. 6 para. 1 point c GDPR). Compliance with commercial and tax law obligations is based on the same legal basis. Where we require data to prevent abuse or to assert or defend legal claims, this is based on Art. 6 para. 1 point f GDPR.

Recipients and processing outside the EEA

Service providers for hosting and IT operations, communications and newsletters, payment processing, transport, approved analytics and advertising functions, and tax and legal advice receive data to the extent necessary. Payment and transport service providers may process the data required for the selected service under their own responsibility. Transfers required by law are made to the competent authorities. Where required, commissioned service providers are contractually obliged to process data in accordance with instructions.

Where data are processed in countries outside the European Economic Area when using a service provider, this is done on the basis of an adequacy decision or appropriate safeguards, in particular EU Standard Contractual Clauses, where applicable with additional protective measures; statutory derogations remain unaffected. You can request information about the specific transfer and a copy of the relevant safeguards via our privacy contact.

Newsletter

With your consent, we use your email address to send you occasional information about our products and offers (Art. 6 para. 1 point (a) GDPR). We document your subscription and its confirmation as evidence of your consent. You can unsubscribe from the newsletter at any time via the unsubscribe link or by sending us a message. Your address will then no longer be used for this purpose; required evidence and a minimal blocking record may be retained to fulfil legal obligations or to respect your objection. Personalised analysis of opens and clicks is carried out only with consent granted for this purpose.

Visitor analytics and advertising

Where you consent, we use analytics and advertising functions to measure the use of our services and the success of adverts, and to deliver advertising. In particular, online identifiers, device and browser information, IP address, pages visited, interactions and campaign assignments may be processed; cookies or comparable technologies may be used; and pseudonymous user profiles may be created. Data may be transferred to providers of analytics and advertising services and linked with information already held by them.

The legal bases are Section 25( 1 ) TDDDG and Article 6( 1 )(a) GDPR. The functions are only activated after you have given your consent. Refusal does not affect your ability to place an order. You can change your selection at any time via the cookie settings or withdraw it with effect for the future. You will receive information about the functions used in each case and the storage periods when making your selection. Evaluation data is deleted when the evaluation purpose defined with the consent and the retention period specified for it no longer apply; legally required records of consent may be retained for longer where applicable.

Social Media

We maintain linked profiles on social networks. When you access a profile, the respective network operator processes data in accordance with the privacy notices available there. For messages and public posts that you send to us, we process the visible profile and communication data in order to handle your request and for public relations purposes (Art. 6 para. 1 point (b) or (f) GDPR). Where a network provides us with statistical analyses, joint responsibility may exist for collecting and producing them; the relevant information and agreements are available on the respective profile or network. You can assert your rights both against us and against the respective operator.

Retention period

We store data only for as long as is necessary for the respective purpose. Once an enquiry has been completed or a contract has been processed, we delete data that is no longer required, unless retention obligations or legitimate grounds, such as ongoing claims, prevent this. Commercial and tax documents are retained for six, eight or ten years, depending on the type of document. The data are deleted once the relevant retention periods have ended. A customer account can be closed on request; contract data subject to retention requirements remain stored separately.

Your rights

Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing and data portability. You may withdraw any consent you have given at any time with future effect. This does not affect the lawfulness of processing carried out before withdrawal.

You can object to processing based on legitimate interests on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

You can lodge a complaint with a data protection supervisory authority, in particular in your place of residence, workplace or the place of the suspected infringement. The authority responsible for our registered office is the Hessian Commissioner for Data Protection and Freedom of Information: datenschutz.hessen.de.