Skip to content

Privacy policy

Privacy at a glance

Without your consent this website sets no cookies and transfers no data to Google or other providers. Only if you agree in the banner do we use Google Analytics for statistics and to measure our Google ads (section 4). You can change your choice at any time via “Cookie settings” at the bottom of every page. There are no embedded third-party services.

1. Controller

RAU Geosystem Süd GmbH Am Riederloh 28, 87600 Kaufbeuren, Germany Phone +49 8341 995 71 80, email info@rau.bayern Represented by its managing director, Erwin Königsberger.

We are not required to appoint a data protection officer. Please send any questions about data protection to the address above.

2. Hosting

The website runs on a dedicated server of RAU Geosystem Süd GmbH, rented from Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Nuremberg. We have a data processing agreement with Hetzner under Art. 28 GDPR.

We use an IT service provider to set up and run the server, likewise on the basis of a data processing agreement.

3. When you visit the website

When you open a page, your browser necessarily transmits your IP address and details such as the browser type and the address requested. We use this data only to deliver the page. The web server does not keep access logs containing IP addresses.

  • Your consent choice: So that the banner does not appear on every page, we store your choice and when you made it in your browser's local storage (entry rau-einwilligung). This is not a cookie and is not sent to us or anyone else. It is strictly necessary to respect your decision (Section 25(2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act). We ask again after twelve months.
  • Analytics and ad measurement only with consent: Google Analytics is loaded only once you agree (section 4). We do not use advertising pixels from other providers, a tag manager or social media plugins.
  • Fonts and images are hosted on our own server. No data is transferred to Google Fonts or other providers when you visit.
  • Map: The contact page links to OpenStreetMap. Only when you click the link does the OpenStreetMap Foundation's website open, and its own privacy policy applies there.
  • Encryption: The connection is encrypted with TLS (you can tell by the “https”).

The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

4. Google Analytics (only with your consent)

If you agree in the banner, we use Google Analytics 4 (measurement ID G-2X49B4GCVV). Before that, the site loads nothing from Google. You can choose two purposes separately:

  • Statistics: which pages are viewed, how visitors reach the site (for example via a search engine or an ad) and whether an enquiry was sent or a phone number tapped. Google does not receive the content of your enquiry.
  • Ad measurement: whether an enquiry results from one of our Google ads (conversion measurement in Google Ads). For this, the ad's click ID (gclid) is kept in your browser's session storage for the duration of your visit and sent to us with an enquiry.

Personalised advertising and the cross-device feature “Google signals” are switched off.

  • Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on our behalf (Art. 28 GDPR).
  • Data processed: addresses viewed, time, referring page, device, browser and screen size, approximate location (derived from the IP address; Google Analytics 4 does not store the IP address), a random identifier in cookies.
  • Cookies: _ga and _ga_2X49B4GCVV (statistics, up to 2 years); with ad measurement also _gcl_au or _gcl_aw (90 days).
  • Legal basis: your consent, Art. 6(1)(a) GDPR, and for storing and reading information in your browser Section 25(1) TDDDG.
  • Transfer to the USA: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR).
  • Retention: Google Analytics deletes event data after 14 months. The cookies expire after the periods above or are deleted when you withdraw consent.
  • Withdrawal: at any time with effect for the future via “Cookie settings” at the bottom of every page. Google's cookies are then deleted and Google Analytics is no longer loaded. You can also delete or block cookies in your browser.

Without consent the website works fully, including the enquiry form.

5. Enquiry form

When you write to us using the form, we process the details you enter: your name and email address and, if you provide them, your company, phone number, location, application, dimensions and your message and any files you attach. We also store the page and the language in which you submitted the form and, only if you agreed to ad measurement, the click ID of the Google ad that brought you here.

  • Purpose: To handle your enquiry and, where applicable, prepare a quotation.
  • Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and your consent, which you give by ticking the box in the form (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
  • How it is sent: Your enquiry is sent as an encrypted email to our company mailbox. Our email provider is Neue Medien Münnich GmbH (ALL-INKL.COM), Hauptstraße 68, 02742 Friedersdorf, Germany, with whom we have a data processing agreement. The website itself does not store your enquiry.
  • Protection against misuse: To fend off mass spam, the server keeps your IP address in memory for no more than one hour and counts how many enquiries have come from it. It is not stored and not passed on (Art. 6(1)(f) GDPR).
  • Retention period: We delete your enquiry once it has been dealt with, unless statutory retention obligations apply. If it leads to an order, the retention periods under German commercial and tax law of up to ten years apply.

6. Enquiries by email or phone

If you contact us by email or phone, we process your details to handle your enquiry. The legal basis, email provider and retention period are the same as in section 5.

7. Your rights

You have the right at any time to

  • access the data we hold about you (Art. 15 GDPR),
  • rectification (Art. 16), erasure (Art. 17) and restriction of processing (Art. 18),
  • data portability (Art. 20),
  • withdraw your consent with effect for the future (Art. 7(3)),
  • object to processing based on our legitimate interest (Art. 21 GDPR).

An informal message to info@rau.bayern is enough.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

8. No automated decision-making

We do not make automated decisions within the meaning of Art. 22 GDPR.

Last updated: October 2026