Privacy policy

Last updated: May 2026

This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter "data") within our online offering and the associated websites, functions and content (hereinafter "online offering"). With regard to the terminology used, such as "processing" or "controller", we refer to the definitions in Art. 4 GDPR.

Controller

Beeh & Happich GmbH
Rennbahnstraße 72–74
D-60528 Frankfurt am Main, Germany
Tel. +49 69 976515-0
E-Mail: info@beeh-happich.de

Types of Data Processed

  • Master data (e.g. names, addresses)
  • Contact data (e.g. email addresses, telephone numbers)
  • Content data (e.g. text entries)
  • Usage data (e.g. pages visited, access times)
  • Meta and communication data (e.g. device information, IP addresses)

Purposes of Processing

  • Provision of the online offering, its functions and content
  • Responding to contact requests and communicating with users
  • Security measures
  • Reach measurement and web analytics (only with consent)

Legal Bases

We process personal data on the following legal bases pursuant to Art. 13 GDPR:

  • Art. 6(1)(a) GDPR – Consent of the data subject (e.g. for analytics cookies)
  • Art. 6(1)(b) GDPR – Performance of a contract and pre-contractual measures
  • Art. 6(1)(c) GDPR – Compliance with a legal obligation
  • Art. 6(1)(f) GDPR – Legitimate interests of the controller

Security Measures

In accordance with Art. 32 GDPR, we implement technical and organisational measures to ensure a level of protection appropriate to the risk. This includes in particular the encrypted transmission of data between your browser and our server using TLS encryption (recognisable by the "https://" prefix in the address bar). We will update this Privacy Policy whenever changes to our data processing activities make this necessary.

Cooperation with Processors and Third Parties

Data is only disclosed to third parties on the basis of a legal permission, your consent, a legal obligation, or on the basis of our legitimate interests. Where we engage third parties on the basis of a data processing agreement pursuant to Art. 28 GDPR, this is done under the conditions set out therein.

Transfers to Third Countries

Where we have data processed in countries outside the EU/EEA, or this occurs through the use of third-party services, this only takes place where the specific requirements of Art. 44 et seq. GDPR are met – for example on the basis of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or an adequacy decision by the European Commission. We indicate the specific transfer mechanism in each relevant section below.

Rights of Data Subjects

You have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g. the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, Germany

Right of Withdrawal

You may withdraw any consent you have given us at any time with effect for the future pursuant to Art. 7(3) GDPR. The lawfulness of processing carried out prior to withdrawal remains unaffected.

Right to Object

You have the right to object at any time to the processing of your data pursuant to Art. 21 GDPR, in particular where processing is carried out for direct marketing purposes. Where legitimate interests serve as the legal basis, you may object if grounds arising from your particular situation exist.

Cookies

Cookies are small text files stored in the user's browser. We use cookies that are technically necessary for the operation of the website (session cookies, transient cookies), as well as – following your consent – cookies for analytics and marketing purposes. Technically necessary cookies may be set on the basis of Art. 6(1)(f) GDPR (legitimate interests) without consent. All other cookies are only set after your explicit consent via our consent management tool. You may disable the storage of cookies in your browser settings or delete cookies that have already been stored. Please note that this may result in limited functionality of the website.

Consent Management

We use a consent management tool that, upon your first visit to our website, gives you the opportunity to grant, refuse, or subsequently change your consent for non-essential cookies and services. Your consent decisions are stored and may be withdrawn at any time. Open cookie settings

Hosting and Server Log Files

Our online offering is hosted on servers located in Germany. Hosting is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interests in the secure and efficient operation of the service) in conjunction with Art. 28 GDPR. Each time our server is accessed, information is automatically recorded in so-called server log files. This includes the name of the page or file accessed, date and time of access, data volume transferred, notification of successful retrieval, browser type and version, operating system of the user, referrer URL (previously visited page), IP address and requesting provider. Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring reliable operation, error diagnosis and defence against attacks. Log file data is deleted after a maximum of 7 days, unless further retention is required for evidentiary purposes.

Contact

When you contact us (e.g. via contact form or email), we process your details pursuant to Art. 6(1)(b) GDPR in order to handle and respond to your enquiry. Enquiries are deleted once they are no longer required; we review necessity every two years. Statutory retention obligations remain unaffected.

Deletion of Data

Data is deleted or its processing restricted as soon as the purpose for storage ceases to apply and no statutory retention obligations stand in the way. Under German law, the following retention periods apply in particular: 10 years for books, records, accounting vouchers and tax-relevant documents (§ 147 AO, § 257 HGB) and 6 years for commercial correspondence (§ 257 HGB).

Administration and Financial Accounting

We process data in the context of administrative tasks, financial accounting and compliance with legal obligations (Art. 6(1)(c) and (f) GDPR). Those affected include customers, prospective clients, business partners and website visitors. Data is disclosed to tax authorities and to engaged tax advisors or auditors where required by law.

Fonts

All fonts used on this website are loaded exclusively from our own server. No connection to external font services is established. Your IP address is not transmitted to any third party in connection with fonts.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only used on this website after your explicit consent. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via our consent management tool. Google Analytics 4 does not use full IP addresses; the IP address is truncated by default on Google's servers prior to storage. Data may be transferred to Google servers in the United States. Google LLC is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023, https://www.dataprivacyframework.gov/). User data stored in cookies is deleted or anonymised after 14 months. Further information: https://policies.google.com/privacy — Browser opt-out plugin: https://tools.google.com/dlpage/gaoptout

Google Maps

This website uses the mapping service Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after your active consent by clicking on it. Only at that point is a connection established to Google's servers and your IP address transmitted. The legal basis is Art. 6(1)(a) GDPR. Data may be processed in the United States. Google LLC is certified under the EU-US Data Privacy Framework (see above). Privacy Policy: https://policies.google.com/privacy

hCAPTCHA

We use hCaptcha, a service provided by Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA, on our website. hCaptcha protects our forms against spam and misuse. In this context, data such as IP address, browser and device information, and user behaviour may be collected and transmitted to servers in the United States. The legal basis is Art. 6(1)(f) GDPR (legitimate interests). The transfer of data to the USA is carried out on the basis of EU Standard Contractual Clauses. Privacy Policy: https://www.hcaptcha.com/privacy Terms of Service: https://www.hcaptcha.com/terms

Business Analytics

For the purpose of managing our business operations, we analyse available data relating to transactions, contracts and enquiries on the basis of Art. 6(1)(f) GDPR. External reports are produced exclusively in anonymised, aggregated form. Personal analyses are anonymised or deleted within two years at the latest.