Privacy Notice
Privacy Policy of empiriecom (GmbH & Co. KG), Bahnhofstraße 10, 96224 Burgkunstadt.
Effective as of: October 26, 2026
In the following privacy policy, we provide you with information regarding the processing of personal data carried out by empiriecom (GmbH & Co. KG), Bahnhofstraße 10, 96224 Burgkunstadt (“empiriecom” and/or “we” and/or “the controller”) in accordance with the GDPR and the Federal Data Protection Act (Federal Data Protection Act 2018).
Please read our privacy policy carefully. If you have any questions or comments regarding our privacy policy, please feel free to contact us at connect@empiriecom.com.
Contents
- Name and contact information of the data controller
- Contact information of the data protection officer
- Online Presence and Website Optimization (Using Cookies)
- Social media links
- Data Processing When Contacting Us
- Job Postings
- Protected Downloads
- Partner Portal
- Hosting and Server Log Files
- Your Rights
- Data Security
1. Name and contact information of the data controller
empiriecom (GmbH & Co. KG)
Bahnhofstraße 10
96224 Burgkunstadt
Germany
Represented by: Ralf Männlein
Phone: 09572 6093-0
Email address: connect@empiriecom.com
for the following websites: empiriecom.com
2. Contact Information for the Data Protection Officer
You can contact the data protection officer of the data controller at
BAUR Versand (GmbH & Co KG)
- Data Protection Officer -
Bahnhofstraße 10
96224 Burgkunstadt
Germany
Phone: 09572-5050
Email address: service@baur.de
.
3. Online Presence and Website Optimization (Using Cookies)
3.1. Cookies – General Information and Requirement for Consent
This website uses cookies. Cookies are small text files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.). The cookie stores information related to the specific device you are using. However, this does not mean that we thereby gain direct knowledge of your identity. Some of the cookies we use are deleted at the end of the browser session (so-called session cookies).
According to legal requirements, the storage of information on devices (desktops, cell phones, tablets, etc.) —e.g., by setting cookies—as well as retrieving information from end devices (tracking) is generally permitted only if you have previously given your consent. The legal basis for this is Section 25(1), Sentence 1 of the TTDSG. However, consent is not required if such storage or retrieval is necessary for the website to function. The legal basis for this is Section 25(2)(2) of the TTDSG. Such storage or retrieval is necessary, for example, to ensure the following functionalities or to achieve the following purposes:
- Ensuring system security
- Providing the services requested by website visitors.
With regard to the data processing required for the operation of the empiriecom.com website, you have no right to object.
You can use this website without data from your device being retrieved or stored on it for purposes that are not necessary for the operation of this website. For this reason, only “basic tracking” is enabled when using this website.
3.2. Options for Taking Action / Browser Settings
Of course, you can configure your browser so that it does not store certain cookies on your device. The Help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, and how to delete all cookies you have already received and block all future ones.
To do this, please follow these steps:
In Internet Explorer:
In the "Tools" menu, select "Internet Options."
Click the "Privacy" tab.
Now you can configure the security settings for the Internet zone. Here, you can specify whether and which cookies should be accepted or rejected.
Click "OK" to confirm your settings.
In Firefox:
From the "Tools" menu, select "Options."
Click "Privacy."
From the drop-down menu, select "Custom settings."
Now you can specify whether cookies should be accepted, how long you want to keep them, and add exceptions for websites you always or never want to allow to use cookies.
Click "OK" to confirm your settings.
In Google Chrome:
Click the Chrome menu in the browser toolbar.
Now select "Settings."
Click "Show advanced settings."
Under "Privacy," click "Content settings."
Under "Cookies," you can configure the following settings for cookies:
• Clear cookies
• Block cookies by default
• Clear cookies and site data by default when you close the browser
• Allow exceptions for cookies from specific websites or domains
If you want to delete individual cookies set in your browser or find out which service providers or websites have set cookies in your browser, you can also do so using a “preference manager.” One such tool is available, for example, at www.youronlinechoices.com.
3.3. Consent to the Use of Individual Online Services / the Collection of Tracking Data
When you visit our website for the first time, a consent dialog box appears. There, you can choose which groups of services you want to allow:
- Essential cookies: always active; required for the website to function.
- Analytics cookies: Analysis of usage (Google Analytics via Google Tag Manager, SalesViewer).
- External components: Content from other providers (YouTube, SoundCloud, kununu).
By clicking “Accept All,” you consent to all groups; by clicking “Save Selection,” you consent only to the groups you have selected; by clicking “Decline All,” you consent to none of them. Without your consent, the services in the “Analytics Cookies” and “External Components” groups will not be loaded, and no data will be transmitted to these providers. We store your selection for 30 days in a cookie (klaro), after which we will ask you again. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
Withdrawal: You can change or withdraw your selection at any time: via the “Cookie Settings” link at the bottom of each page or here: Set Privacy Settings. The withdrawal takes effect for the future.
3.3.1 Strictly Necessary Cookies (No Consent Required)
Name
Purpose
Duration
klaro
saves your selection in the consent dialog
30 days
SSESS… (session cookie)
only if you log in to the partner portal or download a protected file: identifies your session
until you close your browser
Visitors who do not use any of these functions will not receive a cookie from us. The legal basis is Section 25(2)(2) of the TDDDG and Article 6(1)(f) of the GDPR.
3.3.2 Consent for Statistical Cookies and Services
3.3.2.1 Google Analytics as the "Basic Version"
We integrate Google Analytics via Google Tag Manager. Tag Manager and Google Analytics are not loaded until you have given your consent in the “Analytics Cookies” group.
For the purpose of tailoring the design of empiriecom.com to your needs, continuously optimizing the site, and supporting our marketing activities, Google Analytics processes data based on the consent you have provided. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Among other things, Google Analytics uses so-called “cookies” (text files) and similar technologies that are stored on your device and enable an analysis of your use of the website. This information is used to evaluate your use of the website and to compile reports on website activity. Once we have transmitted the data to Google Ireland Limited, Google processes it as the sole data controller under data protection law. In this context, Google Ireland Limited, as the sole data controller, may store data about you in the United States. The European Court of Justice has determined that the United States is a country with an inadequate level of data protection. In this context, there is a particular risk that your data may be processed by U.S. institutions or authorities for monitoring and surveillance purposes without you having sufficient legal recourse against such processing. The legal basis for this data processing is Article 6(1)(a) of the GDPR (consent).
The consent granted for the use of Google Analytics may be revoked at any time here.
3.3.2.2 Consent to the Use of SalesViewer
This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research, and optimization purposes.
To this end, a JavaScript-based code is used to collect company-related data and for the corresponding purposes. The data collected using this technology is encrypted using a one-way function that cannot be reversed (known as hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website.
The data stored via SalesViewer is deleted as soon as it is no longer required for its intended purpose and provided that no legal retention obligations prevent its deletion.
The legal basis for this data processing is Article 6(1)(a) of the GDPR.
You may object to the collection and storage of data at any time here.
SalesViewer is loaded only after you have given your consent in the “Analytics Cookies” group.
3.3.3 External Components
On some pages, we embed content from other providers. Before you give your consent, nothing is loaded from these providers. Instead of the content, you will see a notice with the buttons “Yes (one-time)” (only for this display) and “Always” (for the “External Components” group, 30 days). Only then will your browser retrieve the content from the provider; in doing so, the provider will receive your IP address and may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): embedded videos. Until you give your consent, we display a preview image that comes from our own server. Privacy Policy: https://policies.google.com/privacy
- SoundCloud (SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin): Audio player. Privacy policy: https://soundcloud.com/pages/privacy
- kununu: Rating badge on the careers page. Privacy Policy: https://www.kununu.com/de/info/datenschutz
4 Social Media Links
At the bottom of our page, we provide links to our profiles on Xing, LinkedIn, kununu, Facebook, and Instagram. No plugins are embedded—only links: Your data is not transmitted until you click on a link and thereby visit the respective provider’s website; that provider’s privacy policy applies there.
5 Data Processing When Establishing Contact
You have several ways to contact us. When you contact us, we use the personal data you voluntarily provide to us in this context solely for the purpose of contacting you and processing your inquiry.
The legal basis for this data processing is Article 6(1)(a), Article 6(1)(b), Article 6(1)(c) of the GDPR, and Article 6(1)(f) of the GDPR.
If you use our contact form, we process your information (subject, message, first name, last name, email address, optional phone number) solely to process your inquiry. The information is stored on our website and forwarded via email to connect@empiriecom.com. We implement spam protection without third-party providers: a field invisible to humans, a minimum time period and a small computational task that your browser solves in the background (Friendly Captcha). The task and its verification run on our own server; no third-party services are loaded and no data is transferred to third parties. We will delete your inquiry as soon as it has been fully processed, at the latest after 6 months, provided that no statutory retention requirements prevent this. The legal basis is Art. 6(1)(b) of the GDPR (pre-contractual measures and performance of a contract) or Art. 6(1)(f) of the GDPR (processing of inquiries).
6 Job Postings
We manage our job openings using onlyfy by XING (New Work SE, Am Strandkai 1, 20457 Hamburg). Our server retrieves the list of job openings and the job descriptions from onlyfy and displays them on our website; your IP address is not transmitted to onlyfy during this process. Copies of the images from the job postings are stored on our server. When you click “Apply Now,” you will leave our site and be redirected to onlyfy; the processing of your application data there is subject to onlyfy’s privacy policy.
7 Protected Downloads
For individual documents (such as white papers), we ask that you provide your first name, last name, business email address, and company name before downloading. We will send you a confirmation link (double opt-in) that is valid for 30 days. After confirmation, we will grant you access to the files for your current session (session cookie; see 3.3.1). We store your information and the time of confirmation for 6 months and are notified of each download so that we can contact you if you are interested. The form rejects private email addresses from major providers; only the domain of the address is checked for this purpose. The legal basis is your consent (Art. 6(1)(a) GDPR) and our legitimate interest in contacting interested parties (Art. 6(1)(f) GDPR).
8 Partner Portal
The Partner Portal is accessible only to partners with login credentials. We create the accounts (username, name, email address, and encrypted password); self-registration is not available. When you log in, we set a session cookie (see 3.3.1). The documents in the portal are accessible only after logging in. The legal basis is Art. 6(1)(b) of the GDPR (performance of the partnership). We delete the account when the partnership ends.
9 Hosting and Server Log Files
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf. When you visit the site, the server stores technically necessary data in log files (IP address, date and time, page accessed, browser, referrer). This data is used to ensure secure operation and is deleted as soon as it is no longer required for this purpose. The legal basis is Art. 6(1)(f) of the GDPR.
10 Your Rights
You have several ways to contact us: by email, by phone, or by mail. When you contact us, we use the personal data you voluntarily provide to us in this context solely for the purpose of contacting you and processing your inquiry.
The legal basis for this data processing is Article 6(1)(a), Article 6(1)(b), Article 6(1)(c) of the GDPR, and Article 6(1)(f) of the GDPR.
10.1. Overview
In addition to the right to withdraw the consent you have given us, you are entitled to the following additional rights, provided the respective legal requirements are met:
• the right to access your personal data stored by us (Article 15 of the GDPR), in particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, and the source of your data, provided it was not collected directly from you;
• the right to have inaccurate data corrected or accurate data completed (Article 16 of the GDPR),
• the right to erasure of your data stored by us (Article 17 of the GDPR), provided that we are not required to comply with any statutory or contractual retention periods or other legal obligations or rights regarding further storage,
• the right to restrict the processing of your data (Article 18 of the GDPR), provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure; the controller no longer needs the data, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR,
• the right to data portability pursuant to Article 20 of the GDPR, i.e., the right to receive selected data we have stored about you in a structured, commonly used, machine-readable format, or to request that it be transmitted to another controller
• the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority at your usual place of residence, your workplace, or our corporate headquarters.
You may exercise the aforementioned rights you have against us at connect@empiriecom.com.
10.2. Right to Object
Under the conditions set forth in Article 21(1) of the GDPR, the data subject may object to the processing of personal data on grounds relating to his or her particular situation.
The general right to object described above applies to all processing purposes described in this Privacy Policy that are carried out on the basis of Article 6(1)(f) of the GDPR. Unlike the specific right to object to data processing for marketing purposes, under the GDPR we are only obligated to honor such a general objection if you provide us with reasons of overriding importance (e.g., a potential threat to life or health).
10.3. Right of Withdrawal
To the extent that we process data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not render the data processing carried out on the basis of that consent up until the time of withdrawal invalid.
11. Data Security
11.1. Warning About Fake Emails (Spoofing), Spam, and Phishing
The security of our customers' data is our top priority. Below, we would like to provide you with some security tips.
Beware of so-called phishing and spoofing attempts
Unfortunately, empiriecom is also being misused as the supposed sender in this scam. Specifically, this means that consumers receive fake emails in the name of empiriecom. These emails often even mimic the empiriecom brand layout and may be difficult to distinguish from genuine emails from empiriecom.
The scammers aim to exploit the trust between empiriecom and our customers in order to steal sensitive data or install malicious software (such as viruses or Trojans) on your computer or smartphone.
These emails are neither created nor sent by empiriecom, even if our name appears as the sender. Unfortunately, empiriecom therefore has no control over the sending of these unauthorized emails.
Here are some characteristics that will help you recognize emails from empiriecom:
- empiriecom will never ask you for personal information via email, nor will empiriecom ask you to confirm personal data via a link in an email.
- empiriecom only sends emails with attachments if you have explicitly requested them from us (e.g., user manuals).
- Emails from empiriecom should not contain any spelling or grammar errors, as they are always proofread before being sent.
Here’s how to properly handle spam, phishing, and spoofing emails:
- We recommend that you delete suspicious emails immediately.
- Never open links or attachments in suspicious emails, and do not disclose any personal information.
Our tip and service for you: If you’re ever unsure, simply use our free callback service or send us an email at: connect@empiriecom.com
11.2. Important Information Regarding the Protection of Your Data
In today’s interconnected world, unauthorized attempts to access personal information are a reality that individuals and businesses must face every day. This is, without a doubt, a major challenge.
Since data protection is our top priority, we invest in the security of our systems and monitor them constantly.