Legal Information — Data Protection

Privacy Policy

This privacy policy explains what personal data is processed when you visit baecut.de, for what purpose, and what rights you have. The websites Hebelwerk (editor.baecut.de) and Formwerk (cad.baecut.de) are subject to their own privacy policies, which are linked on those sites.

1. Data controller

baecut GmbH, represented by the managing director, Kilian Rebmann
Finsterbach 13, 79215 Biederbach
Telephone +49 172 4657111, email kilian@baecut.de

A Data Protection Officer has not been appointed as the legal requirements for doing so have not been met. If you have any questions regarding data protection, please contact us directly at the address given above.

2. Hosting and server logs

The website is hosted by Cloudflare (Cloudflare Germany GmbH, Rosental 7, 80331 Munich, on behalf of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit a page, Cloudflare processes technically necessary data: IP address, date and time, page accessed, amount of data transferred, browser and operating system, and the previously visited page. This data is used to ensure the secure and fast operation of the website and to defend against attacks. The legal basis is our legitimate interest in providing a stable and secure service (Article 6(1)(f) of the GDPR). Cloudflare may process data in the USA; the transfer is based on the EU Commission’s Standard Contractual Clauses and Cloudflare’s certification under the EU-US Data Privacy Framework. A data processing agreement is in place with Cloudflare. Server logs are deleted after a short period of time, at the latest after 30 days, unless they are required to investigate a security incident.

To measure website traffic, we also use Cloudflare Web Analytics. Your browser loads a small script from Cloudflare, which counts page views, loading times, browser type and the country from which the page is accessed. Cloudflare Web Analytics does not set any cookies, does not store any data in the browser and does not create profiles of individual visitors; the IP address is not stored. The legal basis is our legitimate interest in a data-minimal analysis of usage (Article 6(1)(f) of the GDPR); consent under Section 25 of the TDDDG is not required, as no information is stored on or retrieved from your device. Further information: cloudflare.com/web-analytics.

This site does not set any cookies that are not essential for its operation without your consent. On your first visit, we will ask you whether you consent to visitor statistics being collected via Google Analytics. We store your decision in your browser’s local storage (entry ‘baecut-consent’) so that the question does not reappear on every visit. This entry contains only ‘yes’ or ‘no’ and is not transmitted to us or to third parties. You can change your choice at any time via the ‘Cookie Settings’ link in the footer or delete the entry from your browser.

4. Visitor statistics using Google Analytics

If you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies and uses similar techniques to track which pages are visited, for how long, from which type of device and from which region. IP addresses are only processed in truncated form. We use the analytics data to understand which content is being read and to improve the website.

The legal basis is your consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG). Google Analytics will not be loaded without your consent. You can withdraw your consent at any time with future effect via ‘Cookie Settings’ in the footer. Google also processes data in the USA; the transfer is based on Google LLC’s certification under the EU-US Data Privacy Framework and on the EU Commission’s Standard Contractual Clauses. A data processing agreement is in place with Google. User data stored in Google Analytics is deleted after 14 months. Further information: policies.google.com/privacy and support.google.com/analytics/answer/6004245.

5. Contact and enquiry forms

If you use a form on this page (Contact, Machine Enquiry, Quotation with Configuration), we will process the data you enter: your name, contact details, company name and address (if applicable), your message and the details of the machine you require. We use this data solely to process your enquiry and to prepare a quotation. The legal basis for this is the taking of steps to enter into a contract (Article 6(1)(b) of the GDPR) or our legitimate interest in responding to enquiries (Article 6(1)(f) of the GDPR).

The data is transmitted via the form service Web3Forms (web3forms.com), which forwards the entries to us by email. Web3Forms does not store the content permanently, but only for the purpose of delivery. We retain enquiries for as long as is necessary for processing them and for the subsequent business relationship; statutory retention obligations under commercial law remain unaffected. If you also tick the box for the newsletter on the form, Section 7 applies.

6. Contact by email or telephone

If you contact us by email or telephone, we will process your details in order to deal with your enquiry (Article 6(1)(b) and (f) of the GDPR). Emails are stored by our email service provider and deleted as soon as they are no longer required and there is no legal obligation to retain them.

We use Brevo (Brevo GmbH, Köpenicker Straße 126, 10179 Berlin) for the newsletter. Once you have subscribed, you will receive an email containing a confirmation link (double opt-in); you will only be registered once you have clicked on this link. Your email address, the time and IP address of your registration and confirmation, and, if provided, your name will be stored. Brevo analyses whether emails are opened and links are clicked. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time via the link at the end of each email or by sending us a message; your data will then be deleted from the mailing list. A contract for data processing has been entered into with Brevo.

8. Payment via Hebelwerk using Stripe

You complete transactions for the paid tiers of the Hebelwerk tool via Stripe payment links (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). If you click a ‘Buy’ button on the pricing page, you will leave our site; payment details are entered via Stripe, and we do not receive any card details. If you navigate to the pricing page from the editor, the editor appends your email address and account ID to the URL (the ‘mail’ and ‘konto’ parameters). We pass both of these details on to Stripe so that the email field is pre-filled and the purchased tier can be assigned to the correct account. The site can still be used without providing this information; in that case, the assignment is based on the email address entered on Stripe. After the purchase, Stripe provides us with the email address, customer number, selected tier and subscription period; we store this data in our account system (Supabase, see the editor’s privacy policy) in order to activate the tier and allow it to expire upon cancellation. The legal basis for this is the performance of a contract (Article 6(1)(b) of the GDPR). You can manage invoices, payment methods and cancellations via the Stripe customer portal. Further information: stripe.com/de/privacy.

9. Videos from YouTube

We embed YouTube videos (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on the machine pages. The videos are only loaded once you click on ‘Play video’; no data is transferred to Google before this. By clicking, you consent to YouTube processing your IP address and usage data and setting cookies (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG). We use the enhanced privacy mode (youtube-nocookie.com), in which, according to YouTube’s own statements, no information about visitors is stored before the video is played. Further information: policies.google.com/privacy.

10. Fonts and external content

All fonts are loaded from our own server. No fonts are loaded from Google Fonts or other providers. Links to external sites (for example, stripgrazer.at, GitHub, YouTube) lead to content for which the respective operators are responsible.

11. Data security

The connection to this page is encrypted using TLS. We take technical and organisational measures to protect your data against loss, misuse and unauthorised access.

12. Your rights

You have the right to request from us information about the personal data we hold about you (Article 15 of the GDPR), to have it rectified (Article 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing carried out on the basis of a legitimate interest (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, simply send an email to kilian@baecut.de.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.

13. Amendments

We will amend this statement if the website or the legal situation changes. The version published here at any given time shall apply.

As at October 2026