Protecting Your Data
Is Our Responsibility

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Further company details are available in our Imprint.

We receive personal data when you provide it to us—for example, through our quote form, by email, by telephone, or through WhatsApp. Technical data may also be processed automatically when the website is accessed.

• Contact data such as name, email address, and telephone number
• Collection and destination addresses and access conditions
• Requested service, preferred date, volume, and service options
• Information included in your message or project description
• IP address, browser, device, operating system, and access time
• Technical status, referrer URL, and requested website resource

Processing is carried out to provide the website, respond to your request, prepare an offer, perform a contract, meet legal duties, and protect the security of our systems.

When you request a fixed-price offer, the form records the service type, your contact details, preferred contact channel, moving addresses, floor and elevator details, parking distances, desired date, estimated volume, selected additional services, and any description you submit. This information is stored in our inquiry database so our team can assess and process your request.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary to take steps before entering into or to perform a contract. For general inquiries, processing is based on our legitimate interest in efficiently handling customer communications under Art. 6(1)(f) GDPR. Where consent is specifically requested, Art. 6(1)(a) GDPR applies.

Required fields are needed to calculate and respond to your request. Without them, we may be unable to prepare a reliable offer.

If you contact us by email or telephone, we process your contact details and the content of your request to respond and, where relevant, prepare or fulfill a contract. We retain correspondence only as long as needed for these purposes and applicable legal obligations.

To deliver this website securely and reliably, our hosting provider may automatically process server log data, including IP address, request date and time, requested page, transferred data, referrer, browser, operating system, and response status.

This processing is technically necessary and is based on our legitimate interest in secure, stable, and efficient website operation under Art. 6(1)(f) GDPR. Hosting and infrastructure providers process data on our behalf under appropriate contractual safeguards where required by Art. 28 GDPR.

This website does not currently use advertising trackers or analytics tools to build visitor profiles. Technically necessary browser storage or cookies may be used where required to provide a requested function, maintain security, or preserve basic application state.

Links to external websites do not transmit form data through this site merely because they are displayed. Once you follow an external link, the privacy policy of that provider applies. If we add optional analytics, marketing, or embedded third-party media in the future, we will update this notice and request consent where legally required.

We keep personal data only for as long as necessary to answer your inquiry, prepare or perform a service, resolve possible claims, and comply with statutory retention requirements. Commercial and tax records may need to be retained for the periods required under German law. Data no longer required is deleted or restricted.

Access is limited to authorized Balu Express personnel and service providers who need the data for website hosting, database operation, communications, IT support, accounting, or contract fulfillment. We do not sell personal data. Information is shared with other recipients only when necessary, legally required, or authorized by you.

Where a provider processes data outside the European Economic Area, we rely on an applicable adequacy decision, approved standard contractual clauses, or another lawful safeguard when required.

Subject to the applicable legal requirements, you have the right to:

• Access your personal data (Art. 15 GDPR)
• Correct inaccurate data (Art. 16 GDPR)
• Request deletion (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Receive portable data (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent for the future (Art. 7(3) GDPR)
• Complain to a supervisory authority (Art. 77 GDPR)

You may contact any competent data protection supervisory authority. The authority generally responsible for our location is the State Commissioner for Data Protection of Lower Saxony.

We use encrypted HTTPS connections and appropriate technical and organizational measures to protect data against accidental or unlawful destruction, loss, alteration, disclosure, or access. Access to inquiry data is restricted according to operational need.

Internet communication can never be guaranteed to be completely secure. Please avoid including unnecessary sensitive information in free-text fields or ordinary email messages.

We do not use your inquiry data for automated decision-making or profiling that produces legal or similarly significant effects.

We may revise this policy when our website, services, providers, or legal obligations change. The current version is always available on this page, with the latest update date shown above.

Questions about privacy or requests concerning your data can be sent to info@balu-express.de. You can also use our contact page.