Data protection statement

As the operator of this website, we take the protection of your personal data extremely seriously. We will handle your personal data confidentially and in accordance with statutory data protection regulations and this data protection statement. You can use our website without having to input personal data. Where personal data (e.g. name, address, email address etc.) is collected on this site, it is collected on a voluntary basis wherever possible. This data will not be shared with any third party without your express permission.

Nonetheless you should be aware that data transfer via the Internet (e.g. via email) is never wholly secure and the protection of your data against third party access cannot be guaranteed.

1. Name and contact details for the data controller responsible for data processing and for the company data protection officer

This data protection information applies to the processing of data by:

Data controller: HBI Communication Helga Bailey GmbH, represented by its managing directors Corinna Voss and Helga Bailey, Hermann-Weinhauser-Str. 73, 81673 Munich, email info@hbi.de,
tel. +49 (0)89 99 38 87-0, fax +49 (0)89 930 24 45.

The data protection officer for HBI Communication Helga Bailey GmbH can be contacted at s.petersen@pdatix.de or at datenschutz@hbi.de.

2. Collection and storage of personal data and type and purpose of use of personal data

a) When you visit our website

When you visit our website, the browser used on your device will automatically send information to our server. This information will be temporarily saved in a logfile. The following information will be captured and stored until it is automatically deleted:

IP address of requesting computer
Date and time of access
Name and URL of file accessed
Website you were on before visiting ours (referrer URL)
Browser type used and version and where applicable your computer’s operating system and the name of your access provider
Websites accessed by user via our website

The aforementioned data will be used by us for the following purposes:

Establishing a trouble-free connection to our website
Guaranteeing ease of use of our website
Evaluation of system security and stability
Other administrative purposes

The legal basis for data processing is art. 6 para. 1 f) GDPR. Our legitimate interest lies in the aforementioned purposes of data collection. In no circumstances will the data collected be used to identify you. Logfiles and their contents are stored for a maximum of 7 days and then deleted, unless they are required for the clarification or documentation of an abusive or illegal use that has become known within the retention period.

b) When you subscribe to our newsletter

You can subscribe to a free newsletter on our website. If you have expressly agreed to the double opt-in procedure in accordance with Art. 6 para. 1 a) GDPR, we will use your e-mail address to send you our newsletter on a periodic basis. To receive the newsletter, it is sufficient to provide an e-mail address. When registering for the newsletter, the IP address of the accessing computer and the date and time of registration are also transmitted. You can unsubscribe at any time, for example via a link at the end of each newsletter.

We use the email marketing service “MailChimp” from the provider The Rocket Science Group LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA; hereinafter: “MailChimp”) to send newsletters. If you register for the newsletter, the data you provide when registering will be stored and processed on MailChimp’s servers outside the EU. MailChimp processes your data exclusively on our behalf. We have concluded an data processing agreement and standard contractual clauses with MailChimp for this purpose, which provide a suitable guarantee for data transfer. Further information on data protection at MailChimp can be found at: https://mailchimp.com/gdpr/.

c) When you use our contact form

For questions of any kind, you can contact us using the contact form on our website, for which you will have to enter your first name, surname and email address so that we know who has sent the enquiry and so that we can respond. Other information can be provided voluntarily.

If you would like to use our chat to contact us quickly and directly, you first have to agree to use the chat. When using the chat, a cookie is set (see 5.). If you chat with us, only your IP address will be saved. All other data that you provide us with in the context of the chat will be answered if necessary to process further questions.

Data processing for the purpose of contacting us and processing, documenting and following up your enquiry is carried out in accordance with Art. 6 para. 1 b) or f) GDPR. Your data will be deleted as soon as your enquiry has been answered and there is no other purpose for storage.

d) When participating in surveys

We offer you the opportunity to provide feedback or participate in surveys on our website. Your feedback provides us with important insights into customer satisfaction and allows us to continuously improve our services. When you participate in surveys, we collect the following categories of data:

First name, last name or pseudonym
Telephone number and e-mail address, if applicable (e.g. for the purpose of queries)
Answers to the questions and information in free text fields
IP address (for the purpose of abuse control)
Cookies (if you have given your consent)

Mandatory fields are marked in the individual surveys. All other information is voluntary. The legal basis for data processing is the consent you have given in accordance with Art. 6 para. 1 b) GDPR. In exceptional cases, we may invoke our legitimate interest pursuant to Art. 6 para. 1 f) GDPR. You can revoke your consent at any time with effect for the future.

We use the online service Proven Expert to conduct the surveys. The provider is Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, Germany. The company is a data processor of ours and receives the data you provide. The data storage takes place within Germany or Europe. We have concluded a data processing agreement with Expert Systems AG in accordance with Art. 28 GDPR. Further information on data protection at Expert Systems AG can be found at https://www.provenexpert.com/en-gb/privacy-policy/.

3. Data sharing

Your personal data will not be shared with any third party for any purpose other than those defined in this data protection statement. A commercial sale of your personal data expressly does not take place.

Your personal data will be shared with third parties only if:

You have given your express consent under art. 6 para. 1 a) GDPR
The sharing is required under art. 6 para. 1 f) GDPR for the assertion of or defence against claims or for the exercise of rights and there are no grounds for supposing that you have an overwhelming interest in your data not being shared
There is a statutory obligation to do so as per art. 6 para. 1 c) GDPR
The sharing is permissible under statute and under art. 6 para. 1 c) GDPR is necessary for the processing of contractual relations with you.

4. Duration of storage

For the duration of website use or in the event that information or other services are required, the personal data you provide will be stored to the extent allowed and in accordance with GDPR. Your personal data will be deleted or locked as soon as it is no longer required for the purpose for which it was stored. It may be stored for longer if allowed under EU or national legislation in the form of regulations, statutes or other regulations to which the data controller is subject. Except in cases where continued storage is required for formation or performance of contract, data will also be locked or deleted if a storage period specified by the aforementioned provisions expires.

5. Cookies

Our website uses cookies. Cookies do not damage your device and do not contain any viruses, trojans or other malware. Cookies contain information relating to your specific device, but this information cannot be used to identify you.

The use of all the company’s websites implies the consent for those cookies that are absolutely necessary for their functioning. In addition, you can give us consent to use other cookies (e.g. for analysis and marketing purposes). This request is always made before using our websites for the first time and serves as the legal basis for the processing of personal data, which is automatically collected by our websites, on the basis of Art. 6 para. 1 a) GDPR.

6. Third-parties

Below, we provide information about the third-party services we use.

a) Google Services

Responsible for all Google services: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For further information on data protection and the storage period at Google, please see the data protection declaration for Google: https://policies.google.com/privacy?hl=en.

Google Marketing Platform (Google Analytics 4 and DoubleClick)

We use the Google Marketing Platform as a web analytics service and for displaying interest-based advertising. IP anonymisation is enabled on all company websites, meaning that the IP address of users within member states of the European Union or EEA is shortened beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of these websites, Google will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser will not be merged with other Google data. The legal basis for the processing is your consent.

Google Ads Conversion Tracking

We use the Google Ads Conversion Tracking tool to promote our services and increase our reach. This allows us to see which keywords, ads and campaigns lead to the desired customer actions. We can see how many customers interact with our ads on a device and then convert. When you click on a Google Ads ad, a cookie is set on your device. This allows us to recognise that you have reached our website via the ad. We do not receive any personal data from you. Google provides us with a report containing only statistical evaluations (e.g. total number of clicks on our ads). The legal basis for processing is your consent.

Google Tag Manager

We use Google Tag Manager to manage website tags via an interface, enabling us to control the precise integration of services on our website. This allows us to flexibly integrate additional services in order to evaluate user access to our website. The use of Google Tag Manager is based on our legitimate interests, i.e. our interest in optimising our services.

Google reCAPTCHA

We have integrated components from Google reCAPTCHA into our website. This enables us to distinguish whether a contact request comes from a natural person or is automated by a programme. Your IP address and, if applicable, browser data will be transmitted in the process. Furthermore, reCAPTCHA records the user’s dwell time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of reCAPTCHA.

Google CDN

We use Google CDN to ensure the proper provision of content on our website. When you access this content, a connection is established to Google servers, whereby your IP address and, if applicable, browser data are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain security and functionality on the basis of our legitimate interests.

b) Font Awesome

We use Font Awesome (Fonticons, 307 S. Main St., Suite 202, Bentonville, AR 72712, USA) on our website. When you visit our website, the Font Awesome web font is loaded via the Font Awesome CDN. This ensures that the text and icons are displayed correctly on every device. Your IP address must be recognised in order to load the font. Font Awesome also records when which icon files are downloaded, as well as technical data (browser version, screen resolution, time). This collection is necessary for the delivery of the font, for the detection of technical errors and for protection against attacks. Further information about Font Awesome can be found at https://fontawesome.com/privacy.

c) Mouseflow

We use Mouseflow (Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark) on our website, a web analytics tool that analyses user behaviour. If you consent to the use of cookies Mouseflow collects the following information: anonymised IP addresses, clicks, mouse movements, hovering, scrolling; browser; device; language; operating system; screen resolution; visit duration; navigation (URLs); page content (HTML); referrer URL; visitor type (first-time visitor/returning visitor); individual tags or variables.

If you do not give us your consent, we will ensure that Mouseflow only collects completely anonymised information. Anonymisation means that no personal reference can be made and we cannot track you. We therefore do not receive any information about whether you are a first-time visitor to our website or a returning visitor. All data collected by Mouseflow is stored on servers in the EU. For more information on data protection, please visit https://mouseflow.com/de/privacy/.

d) MailChimp

On this website, we use MailChimp (The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA) for our online marketing activities. These activities include: email marketing (newsletters (see above) and automated mailings, e.g. provision of downloads), social media publishing & reporting (e.g. traffic sources, hits, etc.), contact management, landing pages and contact forms.

Our registration service enables visitors to our website to learn more about our company, download content and provide their contact details and other demographic information. This information and the content of our website are stored on MailChimp servers. We may use it to contact visitors to our website and to determine which of our company’s services are of interest to them. The legal basis for data use is Art. 6(1)(a) GDPR or Art. 6(1)(f) GDPR. For more information about MailChimp’s privacy policy, please visit https://mailchimp.com/gdpr/.

e) HubSpot

We use HubSpot (HubSpot Ireland Limited, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland), a CRM and marketing platform that helps us evaluate the use of our website and optimise marketing and communication processes. If you consent to cookies, HubSpot processes the following data in particular: IP address (truncated or anonymised if possible), pages visited, interactions (e.g. clicks, form usage), browser information, device type, operating system, time and duration of visit, referrer URL and information about forms you have filled out.

If you do not give us your consent, we will ensure that HubSpot only processes data that is technically necessary for the operation of the website, in particular if you contact us by using an online form.

For more information about data protection at HubSpot, please visit: https://legal.hubspot.com/privacy-policy

f) Salesviewer

We use SalesViewer (SalesViewer® GmbH, Universitätsstraße 60, 44789 Bochum, Germany) on our website, an analysis tool for statistical evaluation of visitor behaviour and identification of potential business prospects. The data collected by SalesViewer (browser and device information, pseudonymised IP addresses, metadata, interactions) is not used to create profiles. It is not possible to identify individual persons. All data is stored on servers in Germany. No data is transferred to third countries. Further information on data protection at SalesViewer® can be found at: https://www.salesviewer.com/datenschutz/

7. Social media

Our website uses links to social networks on the basis of art. 6 para. 1 f) GDPR in order to promote awareness of our company. The commercial purpose of this usage is a legitimate interest in the sense intended by GDPR. Responsibility for adherence to data protection regulations is that of the providers concerned.

The social media buttons we use are individual buttons embedded in the design of our website and are genuine links to the social media providers concerned. Simply visiting any of the pages of the HBI website will not in itself result in the transfer of any data to social media providers. Only when you click on the link in question will data be transferred.

a) Facebook

When you visit our website, your browser will create a direct link to the servers of Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereafter “Facebook”). Facebook will thus be informed that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or, if you do have a Facebook account, even if you are not logged in to it at the time. This information (including your IP address) will be transmitted from your browser directly to a Facebook server in the US and saved there.

For more information on the scope and purpose of data collection, the processing and use of the data by Facebook, your rights in this regard and how you can adjust your settings to protect your privacy, see https://www.facebook.com/privacy/explanation.

b) Instagram

When you visit our website, your browser creates a direct connection with the servers of Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, US (hereafter “Instagram”). This will inform Instagram that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or, if you do have one, even if you are not logged in to it. This information (including your IP address) will be transferred from your browser directly to an Instagram server in the US and saved there. For more information visit https://help.instagram.com/155833707900388.

c) LinkedIn

When you visit our website, your browser creates a direct connection to the servers of LinkedIn, which is operated LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereafter ” LinkedIn “). This will inform LinkedIn that your browser has accessed the corresponding page of our website, even if you do not have a LinkedIn profile or, if you do have one, even if you are not logged in to it. This information (including your IP address) will be transferred from your browser directly to a LinkedIn server and saved there. For more information see https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

d) X (formerly Twitter)

X is a microblogging service provided by the company X Corp. Responsible for the European region is Twitter International Unlimited Company (One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland) (in the following “X”). If you use our services, e.g. if you visit one of our websites that contains a X button, your browser will also establish a direct connection to the X servers and the button will be loaded from there. In doing so, the information is transmitted to X that our website has been accessed. Even if you are not logged in, X may collect and save usage data.

If you click on the X buttons and submit information via the X window that opens, you transmit the information to X. This information is then published in your X user profile. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by X. For further information on data collection, evaluation and processing of your data by X and your rights in this regard, please refer to https://twitter.com/en/privacy.

8. Data subject rights

You have the right:

under art. 15 GDPR to be informed as to the personal data of yours that we are processing;
under art. 16 GDPR to the immediate correction of inaccurate data held by us or the completion of incomplete data held by us;
under art. 17 GDPR to the deletion of the personal data held by us about you, unless the processing is required for the exercise of the right to freedom of speech or information, for compliance with a legal obligation, on the grounds of public interest or for the assertion of or defence against claims or the exercise of rights;
under art. 18 GDPR to the restriction of the processing of your personal data;
under art. 20 GDPR to have the personal data that you have provided to us issued to you in a structured, current and machine-readable form or to have it transferred to another data controller;
under art. 21 GDPR to object to the processing;
under art. 7 para. 3 GDPR at any time to withdraw your previously given consent. This will mean that we will with future effect have to cease any data processing based on this consent; and
under art. 77 GDPR to complain to the supervisory authorities. This usually involves complaining to the supervisory authority responsible for your habitual place of residence or work or for our corporate head office.

If you wish to make use of your rights, please contact us using the contact details given under 1.

9. Data security

Our website uses the widely deployed SSL (secure socket layer) process in combination with the highest level of encryption supported by your browser, which is usually 256 bit encryption. If your browser does not support this level of encryption, we will revert to 128 bit v3 technology. Whether or not a specific page of our website is encrypted can be determined from the presence of the key or padlock symbol in the status bar at the bottom of your browser.

We also use appropriate technical and administrative security measures to protect your data from accidental or intentional manipulation, partial or total loss, destruction and unauthorised third-party access. Our security measures are continually updated in line with technological developments.

10. Updating and amendment of this data protection statement

This data protection statement is currently valid and was last amended in November 2025.

As our website and services develop or as statutory or official regulations change, it may be necessary for this data protection statement to be amended. The latest version can always be found at, and printed out from, at https://www.hbi.de/en/privacy-policy/.