Privacy
Privacy Policy
This translation is provided for convenience. The original German version is authoritative for legal interpretation. Open the German original
1. Controller
Muhammed Tahir Bagci
BAM Fyx² Smart Repair
Ascherslebener Weg 6c
68307 Mannheim
Phone: +49 162 91 59 063
Email: info@bamfyx.de
2. Hosting and server logs
This website is hosted by STRATO. When it is accessed, technically necessary connection data is processed. This may include the IP address, time of access, requested file, amount of data transferred, browser type, operating system and referrer. Processing serves the secure and stable provision of the website. The legal basis is Article 6(1)(f) GDPR.
3. Local preferences and browser cart
The cart, selected service type, language and colour scheme are stored in the browser’s local storage so that your selection is retained during further use. You can delete this information through your browser settings. Your name, address, phone number and email address are not stored in the local cart storage.
4. Repair orders and appointment booking
When a repair order is submitted, we process contact details, billing and return address, selected repair services, language, service and payment method, appointment details and any voluntary fault description. The data is stored in an access-protected database at the hosting provider. Processing is necessary to take steps prior to entering into a contract and to perform the repair contract. The legal basis is Article 6(1)(b) GDPR.
For on-site orders, the selected appointment is reserved. We also store the time and version of the legal confirmations given at checkout to document the ordering process. Device codes, PINs and passwords are not collected through the website.
For an estimate request, we additionally process device and damage details, voluntary insurance, claim and policy numbers, and uploaded damage photos. This information is processed to review, prepare and send the requested estimate. The legal basis is Article 6(1)(b) GDPR. Photos can only be accessed in the protected admin area.
A random status code is stored for each order so that its progress can be checked. When the code is entered, only the current processing status and the time of the last update are displayed. Names, contact details, addresses, device identifiers and internal notes are not shown.
5. Protection against misuse
Requests are rate-limited to protect the ordering, status and admin systems against automated attacks. For this purpose, the IP address may be processed together with a non-public security key as a non-reversible verification value. These values are used exclusively for system security and are regularly removed. The legal basis is Article 6(1)(f) GDPR.
6. Email notifications
Order, payment and estimate confirmations are sent through the SMTP mailbox configured at STRATO to the customer address provided and to info@bamfyx.de. The contact, order and payment-status details required for the relevant message are processed for this purpose. A failed notification does not affect storage of the transaction.
7. Contact form and custom enquiries
When the contact form is submitted, the name, email address, an optional phone number and the message are stored in the access-protected database so that the enquiry can be handled. The legal basis is the consent given pursuant to Article 6(1)(a) GDPR; consent may be withdrawn at any time with effect for the future. By contrast, the custom repair enquiry form does not store entries in the website database. Depending on the chosen contact method, a prepared message opens in WhatsApp or the email program and is only transmitted when it is sent there. The privacy terms of the relevant provider then also apply.
8. External links
The website contains links to WhatsApp, Instagram and Google. Content from these providers is not embedded in the website. A connection to the relevant provider is only established when you click a link.
9. Fonts, analytics and cookies
The Manrope typeface is served locally. Google Fonts and Google Analytics are not integrated. Technically necessary session cookies are used for the protected admin area and the one-time setup. Secure payment components from Stripe or PayPal are loaded only when an online payment is started. These providers may use technically necessary cookies or similar storage technologies.
10. Storage period
Order, invoice and payment data is stored for as long as required for contract performance and statutory commercial and tax retention duties. Data not subject to a statutory retention duty is deleted or anonymised once its purpose no longer applies and there are no legitimate grounds for further storage. Technical backups are overwritten according to the hosting provider’s backup cycles.
11. Recipients
Access is limited to BAM Fyx² Smart Repair and service providers used to operate the website. These particularly include STRATO for hosting and email and, depending on the payment method selected, Stripe or PayPal. Data is disclosed to other recipients only when necessary for contract performance, required by law or expressly permitted.
12. Online payments through Stripe and PayPal
For an online payment, the payment method, amount, currency, order or request number, email address, payment status and technical transaction identifiers are transmitted to Stripe or PayPal. Card and PayPal account details are entered directly in the secure area of the selected provider and are not stored on the BAM Fyx² server. The legal basis is Article 6(1)(b) GDPR. Depending on the provider, processing outside the European Economic Area may take place on the basis of the applicable data-protection safeguards.
13. Your rights
Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a data protection supervisory authority.
14. Last updated
Last updated: July 2026