Highest brand quality & fair pricing
Service-Hotline +49 7161 35 25 02 Mo to Fr 8 am to 4.30 pm
Fast delivery

Privacy Policy

Privacy policy of Backmann24 GmbH

(as of November 11, 2025)

We are delighted that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the Backmann24 GmbH website, which can be accessed at the domain https://www.backmann24.de/ and its various subdomains ("our website").

Data Controller and data protection officer

Data Controller
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Backmann24 GmbH
Bleichereistraße 28
73066 Uhingen

Phone: +49 7161 3525-02
Email
info@backmann24.de

Data Protection Officer

Dr. Alexander Deicke
K11 Consulting GmbH
Kaffeeberg 11
71634 Ludwigsburg

Email: info@k11-consulting.de

Contents

This privacy policy meets the legal requirements for transparency in the processing of personal data. This includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that we cannot relate to your person (or only with disproportionate effort), e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.

Stored personal data is deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise, or defense of legal claims and in the event of statutory retention obligations.

We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis (e.g., consent or protection of legitimate interests) in individual cases. In addition, we may disclose personal data to third parties in individual cases if this serves to assert, exercise, or defend legal claims. Possible recipients may then include, for example, law enforcement authorities, lawyers, auditors, courts, etc.

If we use service providers to operate our website who process personal data on our behalf within the scope of order processing in accordance with Art. 28 GDPR, these may be recipients of your personal data. You can find more detailed information on the use of order processors and web services in the overview of the individual processing operations.  

Cookies

Cookies are small text files that we send to the browser of your end device and store there when you visit our website. As an alternative to using cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses so that, for example, we are able to recognize the browser you are using when you visit our website again and transmit various information to us (non-necessary cookies). Cookies help us to make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations.  

Our website uses cookies to provide certain technical functions (e.g., for session control and protection against attacks). These technically necessary cookies are set automatically and cannot be deactivated. In addition, technically necessary cookies are set by default by the following third-party providers:

In addition, we use other cookies for statistical or marketing purposes, provided you agree to this. You can activate or deactivate these non-essential cookies at any time via our cookie banner.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

  • Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
  • Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
  • Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
  • Firefox™https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
  • Opera™: http://help.opera.com/Windows/10.20/de/cookies.html

If you do not accept cookies, the functionality of our website may be limited.

Data processing

Below, we provide information about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Provision of the website

Type and scope of processing

You can visit our webpages without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file. When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the file accessed
  • Website from which access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 (1)(f) GDPR. The collection of data and storage in log files is essential for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as further storage of the log files is required by law, processing is carried out on the basis of Art. 6 (1)(c) GDPR. There is no legal or contractual obligation to provide the data, but it is technically impossible to access our website without providing the data.

Storage period

All access data will be deleted no later than 14 days after the end of your visit to the site.

Hosting services provided by a third party

As part of processing on our behalf, a third-party provider provides us with services for hosting and displaying the website. This serves to safeguard our legitimate interests in the correct presentation of our offer, which prevail in the context of a balancing of interests. All data collected when using this website or in the forms provided for this purpose in the online shop as described below is processed on their servers. Processing on other servers only takes place within the scope explained here.
This service provider is located within a country of the European Union or the European Economic Area.

Use of processors and service providers

For the operation and maintenance of our website and to fulfill individual processing purposes, we use various service providers who process personal data on our behalf in accordance with Art. 28 GDPR.

These service providers have been carefully selected, contractually obliged to comply with data protection requirements, and process personal data exclusively in accordance with our instructions.

You can obtain a current overview of the processors and service providers used at any time from the data protection officer at info@k11-consulting.de.

Customer account and orders

Type and scope of processing

We collect personal data when you voluntarily provide it to us when placing an order or opening a customer account. Mandatory fields are marked as such, as in these cases we require the data for contract processing or to open a customer account, and you cannot complete the order and/or open the account without providing this information. The data that is collected can be seen in the respective input forms.

Purpose and legal basis

We use the data you provide in accordance with Art. 6 (1)(b) GDPR for contract processing.

For the fulfillment of the contract in accordance with Art. 6 (1)(b) GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select during the ordering process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves, provided you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Storage period

After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of the tax and commercial law retention periods, unless you have expressly consented to further use of your data or we reserve the right to further use your data, which is permitted by law and about which we inform you in this declaration. You can delete your customer account at any time by sending a message to the contact option described above or by using the function provided for this purpose in your customer account.

Contact form

Type and scope of processing

On our website, we offer you the opportunity to contact us using a form provided. The information collected via mandatory fields is necessary to process your request. In addition, you can voluntarily provide additional information that you consider necessary for processing your contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your data through the use of our contact form is carried out for the purpose of communicating and processing your request on the basis of your consent in accordance with Art. 6 (1)(a) GDPR. If your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 (1)(b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage period

If you use the contact form on the basis of your consent, we will store the data collected for each request for a period of 12 months/three years (three years is relatively long; it would be better to limit this to 12 months), beginning with the completion of your request or until you revoke your consent.

If you use the contact form within the framework of a contractual relationship, we will store the data collected for each request for a period of six years from the end of the contractual relationship.

Contact by email

Type and scope of processing
When you contact us by email, we process your personal data (e.g., name, email address, content of the message) for the purpose of handling your request. This data will not be passed on to third parties unless this is necessary to process your request or required by law.

Purpose and legal basis
Your data is processed on the basis of Art. 6 (1)(b) GDPR, provided that the communication serves to initiate or fulfill a contract. In all other cases, processing is based on our legitimate interest pursuant to Art. 6 (1)(f) GDPR in the proper handling of incoming inquiries.

Storage period
We store the transmitted data until the respective purpose of the communication no longer applies—for example, after your request has been processed—provided that there are no legal retention obligations to the contrary.

Data security

Your personal data is transmitted securely using encryption. This applies to your order and also to the customer login. We use the SSL (Secure Sockets Layer, RSA 1024 key exchange; Camellia 256 user data encryption) and S/MIME encryption systems. We use technical and organizational security measures to protect your data that we manage against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Access to your customer account is only possible after entering your personal password. You should always treat your access information as confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others.

Newsletter

Type and scope of processing

If you register on our website to receive our newsletter, we collect your email address and, if applicable, other information that can be derived from the input mask used for this purpose, and store this information together with the date of registration and your IP address. You will then receive an email in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your subscription, it will automatically expire and the data will not be processed for the purpose of sending the newsletter.

We use a service provider to send the newsletter, which processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending the newsletter on the basis of your consent in accordance with Art. 6 (1)(a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future in accordance with Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Storage period

After you subscribe to the newsletter, we store your data for a maximum of 14 days until your subscription is confirmed. After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter) and for a maximum of 3 years beyond that in order to be able to prove the consent previously given, if necessary. No other processing takes place. In the event of obligations to permanently observe an objection, we reserve the right to store the email address solely for the purpose of implementing this objection in a block list.

Newsletter tracking

The newsletters of thermohauser GmbH contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. The embedded tracking pixel collects technical information, such as information about your browser and your system, as well as your IP address and the time of retrieval.

This information is used to technically improve the newsletter based on the technical data or the target groups and their reading behavior based on their retrieval location (which can be determined using the IP address) or access times. This analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the mailing service provider to monitor individual users. Rather, the evaluations serve to recognize the reading habits of users and to adapt the content to them or to send different content according to the interests of the users.

By subscribing to our newsletter, you also consent to this newsletter tracking (Art. 6 (1)(a) GDPR).
You can revoke your consent at any time with future effect by unsubscribing from the newsletter. In this case, you will no longer receive newsletters and tracking will be terminated.

Unfortunately, it is not possible to revoke the performance measurement separately; in this case, the entire newsletter subscription must be canceled or objected to.

  • Types of data processed: Inventory data (e.g., names, addresses), contact data (e.g., email, phone numbers), meta/communication data (e.g., device information, IP addresses), usage data (e.g., websites visited, interest in content, access times).
  • Data subjects: Communication partners
  • Purposes of processing: Direct marketing (e.g., by email or post)
  • Legal basis: Consent (Art. 6 (1)(a) GDPR), legitimate interests (Art. 6 (1)(f) GDPR)

Services used and service providers: Maileon: email marketing platform; service provider: XQueue GmbH, Christian-Pleß-Str. 11-13, 63069 Offenbach am Main; website: https://www.maileon.de/; privacy policy: https://www.maileon.de/datenschutz/  

fontawesome.com

Type and scope of processing

Fonts and icons from the Font Awesome service (fontawesome.com) are integrated into our website. The provider is Fonticons, Inc., 710 Blackhorn Drive, Carl Junction, MO 64834, USA.

When you visit our website, a connection is established to Fonticons' servers in the USA in order to provide the fonts and icons. Technical information such as your IP address, browser information, and the time of access may be transmitted to Fonticons.

Purpose and legal basis

Font Awesome is used to ensure the uniform and appealing display of fonts and icons on our website.
The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR, which you give via our consent management tool.

Data transfer to third countries

Fonticons, Inc. is based in the USA. For data transfers to the USA, standard contractual clauses (SCCs) pursuant to Art. 46 (2)(c) GDPR are used, which are intended to ensure adequate data protection. Further information can be found at: https://fontawesome.com/privacy.

Storage period

We do not store any personal data in connection with the use of Font Awesome. The specific storage period for data processed by Fonticons is determined exclusively by the provider. For more information, please refer to Font Awesome's privacy policy at: https://fontawesome.com/privacy.

Google Fonts

Type and scope of processing

Our website uses fonts provided by Google Fonts. To ensure the protection of your personal data, all fonts used are integrated locally on our servers. This means that no connection is established to Google's servers and no personal data (e.g., IP addresses) is transmitted to Google Ireland Limited or other third parties.

Purpose and legal basis

The use of locally integrated fonts is based on our legitimate interest pursuant to Art. 6 (1)(f) GDPR in order to ensure a uniform and appealing presentation of our website.

Storage period

No personal data is processed or stored during local integration.

Google Analytics

Type and scope of processing

This website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.de), to analyze website usage. Google (Universal) Analytics uses methods that enable analysis of your use of the website, such as cookies. The information collected automatically about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is truncated within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The anonymized IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

Purpose and legal basis

This serves to safeguard our legitimate interests in the optimized presentation of our services, which prevail in the context of a balancing of interests, in accordance with Art. 6 (1)(f) GDPR.

Google LLC is headquartered in the United States. For data transfers to the United States, Google relies on the European Commission's Standard Contractual Clauses (SCC) pursuant to Art. 46 (2) (c) GDPR, which ensure an adequate level of protection for personal data. In addition, Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), which, according to the adequacy decision of the European Commission of July 10, 2023, also provides an adequate level of data protection for certified U.S. companies.

Storage period

Once the purpose has been fulfilled and we have ceased using Google Analytics, the data collected in this context will be deleted.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, you can also use our consent management tool to deactivate Google Analytics tracking on this website.

Users can revoke their consent there at any time, which will automatically deactivate tracking. Please note that when you delete your cookies, your stored consent settings will also be removed and you may need to reset your preferences.

Google Signals
As part of Google Analytics, we use the Google Signals extension, a service that enables cross-device tracking.
To do this, Google uses the data of users who are logged into a Google service at the same time as visiting our websites and have activated the "personalized advertising" option in their Google account settings (https://adssettings.google.com/authenticated), which can be deactivated by the user at any time. The information retrieved in this process may include the user's location, search history, YouTube history, and data from websites that work with Google, and is used to provide aggregated and anonymized insights into users' cross-device behavior.

Google Signals is used exclusively with IP anonymization enabled. Google does not provide us with specific user profiles, but only with statistics based on logins and device types of all users who were logged into a Google account and performed a conversion.
Further information on Google's terms of use and privacy policy is available at
http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/. We have concluded a contract with Google for order processing (AVV) for the use of Google Signals, which ensures that Google processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google Tag Manager

Our website uses Google Tag Manager, a tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage and integrate third-party tools (such as Google Analytics, Facebook Pixel, or other tracking and analysis tools) on our website.

Purpose of processing

Google Tag Manager is used to efficiently integrate and manage third-party tools. Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1)(a) GDPR. Google Tag Manager itself does not set any cookies and does not collect any personal data. However, the data collected via the integrated third-party tools is processed in accordance with their privacy policies.

Data collected by third-party tools

Data processing is carried out by the integrated third-party tools (e.g., Google Analytics or Facebook Pixel). Depending on the integrated tool, the following data may be collected:

  • IP address,
  • Browser type and version,
  • Referrer URL,
  • Duration of visit and pages accessed,
  • User behavior (e.g., click behavior).

The exact data processing depends on the respective tools used.

Data transfer and processing

The integrated third-party tools may also transfer data to third countries, in particular to the USA. In this context Google relies on standard contractual clauses (SCCs) to ensure an adequate level of data protection.

Opt-out and objection

Consent to the use of Google Tag Manager and the associated third-party tools can be revoked at any time. This can be done via the cookie settings on our website or by using the opt-out options provided by the integrated third-party tools.

Further information

Adrule Mobile GmbH

Type and scope of processing

Our website uses marketing technologies from Adrule Mobile GmbH, Alexanderstraße 3, 10178 Berlin, Germany. Cookies set by Adrule are used to collect information about user behavior on our website in order to display interest-based advertising and measure the effectiveness of marketing campaigns. This may include the IP address, device information, pages visited, length of stay, and interactions with ads.

Processing only takes place if you have consented to the use of these cookies via our consent management tool.

Purpose and legal basis

Processing is carried out for the purpose of targeted marketing and to optimize our advertising measures on the basis of your consent in accordance with Art. 6 (1)(a) GDPR.

Recipients and data transfer

The recipient of the data is Adrule Mobile GmbH. Personal data will not be transferred to third countries.

Storage period

The stored data will be deleted as soon as it is no longer required for the purpose for which it was collected or you revoke your consent. Cookies usually have a storage period of up to 13 months.

Withdrawal of consent

You can revoke your consent at any time with future effect via the cookie banner (consent management tool).

Further information on data protection at Adrule can be found at:
https://www.adrule.net/de/datenschutz/

Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after they have placed an order.
This serves to safeguard our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 (1)(f) GDPR, which prevail in the context of a balancing of interests. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is
accessed, the web server automatically stores a so-called server log file, which contains, for example, your IP address, the date and time of the access, the amount of data transferred and the requesting provider (access data) and logs the access. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.
Further personal data is only transferred to Trusted Shops if you have consented to this, if you decide to use Trusted Shops products after completing an order, or if you have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

Sending of review reminders by email / review reminder by Trusted Shops

If you have given us your express consent to do so during or after your order in accordance with Art. 6 (1)(a) GDPR, we will forward your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a review reminder by email. This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

Rights of the data subject

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

  • Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
  • Rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
  • Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse to have it deleted because you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
  • Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1)(a) GDPR or on the basis of a contract pursuant to Art. 6 (1)(b) GDPR and this data has been processed by us using automated procedures. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit the data directly to another controller, if this is technically feasible.
  • Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 (1)(e), (f) GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct marketing. The right to object does not apply if there are compelling legitimate grounds for the processing or if the processing is for the establishment, exercise, or defense of legal claims. If the right to object does not apply to individual processing operations, this will be indicated there.
  • Revocation pursuant to Art. 7 (3) GDPR of your consent with effect for the future.
  • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or our company headquarters.

Competent supervisory authority

The state authority for data protection and freedom of information in Baden-Württemberg is responsible for complaints regarding the processing of personal data.

Below you will find the contact details of the responsible state commissioner:
Prof. Dr. Tobias Kerber

P.O. Box 10 29 32

70025 Stuttgart

Or

Lautenschlagerstraße 20

70173 Stuttgart

Phone: 0711 615541-0

Email poststelle@lfdi.bwl.de

Website: https://www.baden-wuerttemberg.datenschutz.de

Right to object

If we process personal data as described above in order to protect our legitimate interests, which prevail in the context of a balancing of interests, you can object to this processing with effect for the future by contacting us. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right to object if there are reasons arising from your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.