Privacy Policy

Last updated: October 2026

We take the protection of your personal data seriously. This Privacy Policy explains how personal data is processed when you visit the website of Bayerische Patentallianz GmbH (“BAYPAT”).

1. Controller

Bayerische Patentallianz GmbH
Prinzregentenstraße 52
80538 Munich
Germany

Phone: +49 (0) 89 5480177-0
Email: kontakt@baypat.de

2. Privacy contact

If you have any questions regarding data protection, please contact us at kontakt@baypat.de using the subject line “Data Protection”.

3. Provision of the website and server log data

When you access our website, your browser transmits technical connection data required to provide the website to the infrastructure used for hosting it. This may include, in particular, your IP address, date and time of access, requested URL, referrer URL and information about your browser and operating system.

This information is processed to provide the website securely and reliably, to identify technical errors and to protect the website against misuse and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional operation of our website.

4. Hosting through Webflow

Our website is provided using Webflow, Inc.

Where Webflow processes personal data in connection with the technical provision of the website, such processing is carried out as processing on behalf of the controller on the basis of the applicable data-protection agreements with Webflow.

Data may also be processed outside the European Union or European Economic Area, in particular in the United States. The applicable legal transfer mechanisms are used for such transfers, in particular an adequacy decision (such as the EU-US Data Privacy Framework, where applicable) or the European Commission’s Standard Contractual Clauses.

Further information is available in Webflow’s privacy information.

5. Consent management with Cookiebot

We use Cookiebot CMP, a service provided by Usercentrics A/S, to manage your consent regarding cookies and similar technologies.

When you first visit our website, Cookiebot allows you to choose which categories of cookies and technologies you wish to allow. Your selection is stored so that it can be respected on subsequent visits.

You can change or withdraw your consent at any time with future effect using the Cookie Settings available on our website.

Where the storage of your consent decision is required to document and implement your choice, processing is based on Article 6(1)(c) GDPR in conjunction with applicable accountability requirements and Article 6(1)(f) GDPR. Our legitimate interest is the legally compliant and verifiable management of consent.

Further information about the cookies and technologies we use is available in our Cookie Policy.

6. Google Tag Manager

We use Google Tag Manager to centrally manage analytics and other website tags used on our website.

Google Tag Manager primarily serves as a technical system for managing and triggering the services integrated through it. Google states that, apart from standard HTTP request logs and aggregated diagnostic information, Tag Manager does not collect, retain or share information about visitors to customers’ properties. Google states that standard HTTP request logs are deleted within 14 days.

Services integrated through Google Tag Manager are controlled in accordance with the consent preferences you select through Cookiebot.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by affiliated companies, including in the United States, cannot be excluded.

7. Google Analytics 4

If you consent to the Statistics category, we use Google Analytics 4 (GA4), a web analytics service provided by Google.

Google Analytics helps us understand how visitors use our website. Information processed may include:

• pages and content viewed,
• time and duration of visits,
• referring website or source,
• approximate geographical region,
• device type, operating system and browser,
• interactions with the website,
• technical information concerning website usage.

Google Analytics uses cookies and similar technologies to analyse visits and interactions.

Google states that IP addresses are not logged or stored in Google Analytics 4. IP addresses are used during collection, among other things, to derive approximate location information and are then discarded.

Processing takes place solely on the basis of your consent pursuant to Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.

You may withdraw your consent at any time with future effect through our Cookie Settings.

Google Analytics provides configurable retention periods for user-level and event-level data. The applicable retention period depends on our configuration and Google’s applicable retention rules.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by affiliated Google companies in third countries, particularly the United States, may take place.

8. Google Consent Mode

We use Google Consent Mode in connection with Cookiebot and Google services.

Consent Mode communicates the consent status you selected to Google services. This includes, in particular, signals relating to:

• analytics_storage
• ad_storage
• ad_user_data
• ad_personalization

These signals allow Google tags to adjust their behaviour according to your consent preferences.

Google Consent Mode does not replace your consent choice. Your preferences continue to be managed through Cookiebot.

9. Microsoft Clarity

If you consent to the Statistics category, we use Microsoft Clarity, a web analytics service provided by Microsoft.

Clarity helps us understand how visitors interact with our website and where the user experience can be improved.

The information processed may include:

• pages visited and session history,
• clicks,
• scrolling behaviour,
• mouse movements,
• window and display dimensions,
• interactions with website elements,
• technical and performance information.

Clarity uses this information to generate aggregated usage analytics, heatmaps and session recordings. Microsoft describes that privacy-sensitive fields and content can be masked in session recordings.

Where consent has been granted, Clarity uses cookies to associate individual page views and sessions. Microsoft identifies cookies including _clck and _clsk for this purpose.

Processing takes place on the basis of your consent under Article 6(1)(a) GDPR and, where cookies or similar technologies are used, Section 25(1) TDDDG.

You can withdraw your consent at any time through the Cookie Settings.

Microsoft currently states that Clarity playback data is generally retained for 30 days, while click and heatmap data and labelled or favourited sessions may be retained for up to nine months.

The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Processing by Microsoft companies outside the EEA, particularly in the United States, may take place.

10. Cookies and similar technologies

We use technically necessary cookies and similar technologies and, subject to your consent, statistical technologies.

Technically necessary technologies are used where required to provide the website or manage your privacy preferences.

Statistical technologies, including Google Analytics and Microsoft Clarity, are used in accordance with the choices you make through Cookiebot.

Where storage of or access to information on your device is strictly necessary, this is based on Section 25(2) TDDDG. Non-essential cookies and similar technologies are used on the basis of your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.

An up-to-date list of cookies, their providers, purposes and storage periods is available in our Cookie Policy.

11. Newsletter

If you subscribe to our newsletter, we process the email address you provide in order to send the BAYPAT newsletter.

Registration uses a double opt-in process. After registering, you will receive an email asking you to confirm your subscription.

For sending and managing the newsletter, we use Keila (Keila Cloud / keila.io), an open-source newsletter service developed in Germany and hosted in the EU. Keila processes your data on our behalf as a processor.

Depending on the service configuration, technical delivery information and — if enabled — open and click statistics may be processed in connection with newsletter delivery. You may withdraw your consent at any time with future effect, in particular by using the unsubscribe link contained in the newsletter.

Processing is based on your consent pursuant to Article 6(1)(a) GDPR.

12. Contact by email or telephone

If you contact us by email or telephone, we process the personal data you provide in order to respond to your enquiry.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract. In other cases, processing is based on Article 6(1)(f) GDPR.

We delete the data once your enquiry has been fully resolved unless statutory retention requirements apply.

13. Recipients and international transfers

Personal data may be disclosed to the following recipients in connection with the processing described above:

Webflow and its technical subprocessors, Usercentrics/Cookiebot, Google, Microsoft, Keila and IT or other service providers engaged by us.

Where personal data is transferred to countries outside the European Union or European Economic Area, transfers take place in accordance with the applicable legal requirements, in particular on the basis of an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

14. Your rights

Subject to the applicable legal requirements, you have in particular the right to:

• access under Article 15 GDPR,
• rectification under Article 16 GDPR,
• erasure under Article 17 GDPR,
• restriction of processing under Article 18 GDPR,
• data portability under Article 20 GDPR,
• object under Article 21 GDPR,
• withdraw consent at any time with future effect.

To exercise your rights, please contact kontakt@baypat.de.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular:

Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht)
Postfach 1349
91504 Ansbach
Germany
www.lda.bayern.de

15. Changes to this Privacy Policy

We may update this Privacy Policy if the services we use, our technical configuration or applicable legal requirements change.

The version published on this website applies.