Privacy policy
This English version is provided for your convenience. Only the German version is legally binding.
Thank you for your interest in our Carcovers. Protecting your personal data is important to us. Below, in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), we inform you which data we collect when you visit this website (bodmer-covers.de) and how we use it.
1. Controller
Bodmer Textil GmbH & Co. KG
Killwiesen 13
72336 Balingen
Germany
Phone: +49 (0)7433 4184
Email: datenschutz@bodmer.de
Represented by the managing directors of the general partner Bodmer GmbH, Marcus Bodmer and Thomas Bodmer.
2. Hosting and server log files
This website is hosted by the following provider: weber.digital GmbH, Zollernstraße 49, 72336 Balingen, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.
Each time the website is accessed, the server automatically stores information transmitted by your browser (server log files):
- IP address of the requesting device
- Date and time of access
- page or file accessed and amount of data transferred
- website from which the access was made (referrer URL)
- browser and operating system used
This data is technically necessary to deliver the website and to ensure its security and stability (e.g. to fend off attacks). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The IP addresses in the log files are anonymised after seven days. The log files themselves are deleted after one year unless they are needed for longer to investigate a security incident.
3. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar. Data you send to us – for example via our forms – cannot be read by third parties.
4. Enquiry and contact form, contact by email or phone
If you contact us via the enquiry form (configurator), the contact form, by email or by phone, we process the data you provide in order to handle your enquiry and, where applicable, to prepare a quote. This includes in particular:
- first and last name, email address
- optional: address, phone number
- vehicle make and model, selected configuration (colours, fabric)
- the content of your message
The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract (e.g. ordering a Carcover). In all other cases, processing is based on our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
We need the mandatory fields marked with * in order to answer your enquiry. Without this information, processing is not possible. All other information is optional.
The form data is sent to us by email and is not stored in a database on the website. We delete your enquiry once it has been fully processed. If a contract is concluded, we retain the data for as long as statutory retention obligations apply (usually 6 years for business letters under Section 257 HGB and 10 years for tax-relevant documents under Section 147 AO).
5. Storing your configuration in the browser
When you click “Send enquiry” in the configurator, your selection (colours, fabric) is saved in your browser's local storage so that it can be added to the enquiry form automatically. This information stays on your device and is only transmitted to us when you submit the enquiry form.
This storage is strictly necessary for the function you have expressly requested (Section 25(2) No. 2 TDDDG); further processing is based on Art. 6(1)(b) GDPR. You can remove the stored data at any time via your browser settings (delete site data).
6. Cookies and reach measurement with Cloudflare Web Analytics
This website does not use cookies. To understand how our website is used and to improve it, we use the Cloudflare Web Analytics service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When a page is loaded, a small program (JavaScript) is loaded from Cloudflare servers (static.cloudflareinsights.com) and transmits the following information to Cloudflare: the page visited, the time of the visit, the website you came from (referrer), browser, operating system and device type, and technical loading times of the page. For technical reasons, your IP address is also transmitted to Cloudflare; according to Cloudflare, it is not stored and not used to recognise you, but at most to determine your country.
Cloudflare Web Analytics does not use cookies, does not store any information on your device, does not use so-called fingerprinting and does not create user profiles. We only receive aggregated statistics (e.g. number of page views, countries of origin, most used browsers) that do not allow any conclusions to be drawn about individual visitors.
Reach measurement only takes place if you have agreed to it via the notice shown when you visit the website; without your consent, the Cloudflare program is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Cloudflare processes the data on our behalf; Cloudflare’s Data Processing Addendum forms part of the contract (Art. 28 GDPR). For transfers to the USA, we rely on Cloudflare’s certification under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR) and additionally on the EU Standard Contractual Clauses.
We store your choice for twelve months in your browser’s local storage so that the notice does not reappear on every page. This information does not leave your device; storing it is strictly necessary (Section 25(2) No. 2 TDDDG). You can withdraw your consent at any time with effect for the future: change statistics setting. Further information can be found in the Cloudflare privacy policy.
7. Fonts and icons
The fonts (Lato, Oswald) and icons (Font Awesome) used on this website are stored locally on our server. Therefore, no connection to servers of Google or other third parties is established for fonts and icons. Exceptions on this website are the reach measurement (see section 6) and the spam protection on the form pages (see section 8).
8. Spam protection with Cloudflare Turnstile
To protect our enquiry and contact forms against automated spam submissions, we use the Turnstile service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page with a form, a program is loaded from Cloudflare servers for this purpose. Turnstile uses technical characteristics (including IP address, browser and device information) to check whether the input comes from a human. This data is transmitted to Cloudflare and may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website and our mailbox against abuse and spam. Insofar as information is read from your device, this is strictly necessary for sending the form as you requested (Section 25(2) No. 2 TDDDG). In addition, the form records the time when it is loaded in order to detect automated submissions that are too fast; this information is only used for the check and is not stored.
For more information, please see the Cloudflare privacy policy.
9. Recipients of your data
Your data is only passed on to third parties if this is necessary to fulfil a contract (e.g. to a shipping company for delivering your cover), if we are legally obliged to do so or if you have given your consent. Technical service providers (hosting, email) process data exclusively on our behalf and according to our instructions. Apart from the services of Cloudflare, Inc. (Web Analytics, see section 6, and Turnstile, see section 8), no data is transferred to countries outside the EU or EEA.
10. Your rights
You have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent with effect for the future (Art. 7(3) GDPR)
To exercise these rights, simply contact datenschutz@bodmer.de or write to the address above.
Right to object (Art. 21 GDPR)
Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
11. No automated decision-making
No automated decision-making, including profiling (Art. 22 GDPR), takes place.
12. Updates to this privacy policy
We update this privacy policy when the website or the legal requirements change. The version published here applies.
Last updated: November 2026