Privacy Policy

Guardian of Speed UG (haftungsbeschränkt), Georginenstraße 36, 80689 München, Germany. Managing director: Silvia Navarro. Email: edgar@bavarianecons.com. Phone: +49 172 669 0998.

Bavarian Econs is a brand operated by Guardian of Speed UG (haftungsbeschränkt).

We have not appointed a data protection officer because we are not legally required to do so.

Our website is hosted by Vercel Inc., USA. When you visit it, the server automatically processes technical data your browser sends: IP address, date and time of the request, the page requested, the referring page, browser type and operating system. We need this data to deliver the website securely and reliably. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website.

We use Vercel Web Analytics and Vercel Speed Insights. They measure visits and page performance in aggregated form, without cookies and without building user profiles. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding and improving our website.

When you use our contact form, we process what you enter: name, email address and message, and optionally phone number, the model you are interested in and how you found us. If the link you arrived with contains campaign parameters (for example utm_source or fbclid), we store them with your inquiry. When you join the E30 Touring e waitlist, we process your name and email address.

We use this data to answer your inquiry and, where applicable, to prepare an offer. Legal basis: Art. 6(1)(b) GDPR, steps prior to entering into a contract, and Art. 6(1)(f) GDPR, our legitimate interest in answering inquiries and knowing which channels bring them.

Service providers: Supabase Inc., USA (database), Resend Inc., USA (notification emails to our inbox), Google Ireland Limited (email through Google Workspace) and Notion Labs Inc., USA (customer management).

We keep your inquiry as long as we need it to answer you and for any business relationship that follows, and delete it afterwards unless statutory retention periods apply. If you contact us directly by email or phone, we process the data you give us for the same purposes and on the same legal basis.

We use two services to understand our visitors and measure our advertising:

• Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It sets cookies (for example _ga, stored for up to two years) and processes usage data, device and browser information and approximate location. Data may be transferred to Google LLC in the USA.
• The Meta Pixel and the Meta Conversions API, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, to measure and improve our advertising on Instagram and Facebook. The Pixel sets cookies (for example _fbp, stored for up to 90 days) and transmits page views and events, such as a submitted inquiry, together with browser and device information and your IP address. When you send the contact form, our server also transmits to Meta your email address in hashed form, together with your IP address and browser information, so that the inquiry can be matched to an ad. We are jointly responsible with Meta for collecting and transmitting this data (Art. 26 GDPR); Meta is responsible for any further processing. Data may be transferred to Meta Platforms, Inc. in the USA.

Visitors from the EU, the EEA, the United Kingdom and Switzerland: these services only load after you click "Accept" in our cookie notice, and the server side event is only sent with your consent. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. If you decline, we load neither service.

Visitors from other regions: we use these services on the basis of our legitimate interest in measuring and improving our website and advertising (Art. 6(1)(f) GDPR). You can object at any time.

Everyone can change or withdraw their choice at any time, with effect for the future, under "Cookie settings" at the bottom of every page.

Some of our service providers are based in the USA. Where a provider is certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). Otherwise it is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Our pages link to press articles, to videos on YouTube and to our profiles on Instagram and LinkedIn. No data is sent to these services until you click a link. Images from press articles are delivered through our own server, and our fonts are hosted on our own server, so no connection to Google Fonts is made.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). To exercise your rights, write to edgar@bavarianecons.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), www.lda.bayern.de.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

We update this policy when our website or the law changes. The current version is always available on this page. See also our Legal Notice.