Privacy Policy – BALMA – Mats & More

1. Controller

Controller according to GDPR:

BALMA – Mats & More
Brand of GfG – Group Floor Grid GmbH
Bahnhofsweg 3
D-19258 Tessin / OT Kuhlenfeld
Germany

Email: info@balticmats.com
Phone: +49 (0) 38844 23800

2. Collection and Processing of Personal Data

We process personal data when you visit our website, contact us, or use our services. Personal data includes any information relating to an identified or identifiable natural person.

Types of Data Processed

Personal identification data (e.g., name, company)
Contact data (e.g., email address, phone number)
Usage data (e.g., IP address, browser type, access time)
Content data (e.g., messages or information you submit)

Purposes of Processing

Website operation and functionality
Responding to inquiries and customer communication
Ensuring IT security and system stability
Analytics and website optimization

3. Legal Bases

Processing is carried out according to the GDPR:

Art. 6(1)(b) – performance of a contract or pre‑contractual steps
Art. 6(1)(f) – legitimate interests (website operation, IT security, analytics)
Art. 6(1)(a) – consent (e.g., contact form, optional cookies)
Art. 6(1)(c) – legal obligations

4. Hosting and Server Log Files

Our hosting provider automatically collects server log data when you access our website.

IP address
Browser type and version
Operating system
Referrer URL
Date and time of access

These data are required for technical operation, security, and troubleshooting.

5. Contacting Us

When you contact us via email, phone, or form, we process the data you provide to handle your request. Data will be stored as long as necessary for communication or legal retention.

6. Cookies

Our website may use cookies for functionality or analytics.

Types of Cookies

Necessary cookies: required for website operation
Optional cookies: analytics, statistics, marketing

Optional cookies are only used with your consent.

7. Data Sharing

We only share personal data when necessary:

to fulfill contractual obligations
to comply with legal requirements
with technical service providers (hosting, IT security)
with your explicit consent

All service providers are bound by data processing agreements (Art. 28 GDPR).

8. Data Transfers to Third Countries

Data may be transferred outside the EU only when required for specific services and when appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

9. Storage Duration

Personal data is stored only as long as necessary for the respective purpose or as required by law.

10. Your Rights Under GDPR

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time

10.1 Right to Object (Art. 21 GDPR)

You may object at any time to the processing of your personal data based on legitimate interests.

If your data is used for direct marketing, you may object at any time, and we will stop processing your data for this purpose immediately.

11. Complaints to Supervisory Authorities

You have the right to lodge a complaint with a data protection authority if you believe that the processing of your personal data violates the GDPR.

12. Changes to This Privacy Policy

We may update this privacy policy when legal requirements or website changes make it necessary.

Last updated: (08/2026)