Data Protection

Responsible body and data security

Responsible body and data security

Responsible body

The body responsible for data processing on this website is:

Bulthaup GmbH & Co KG
Aich, Werkstraße 6
84155 Bodenkirchen

Telefon: +49 (0)8741 80 0

Data protection

This website uses TLS (transport layer security) encryption for security reasons and to protect the transfer of confidential information, such as orders or requests which you send to us as the site operator. An encrypted connection can be recognized when the browser’s address line changes from “http://” to “https://” and by the padlock symbol in the browser line.


Collection of data on our website

Collection of data on our website


Cookies are used in some of this website. They do not harm your PC or contain any viruses. Cookies make our website easier to use and more effective and secure. They are small text files which are placed onto your computer and saved by your Internet browser.

Most of the cookies we use are so-called “session cookies”. They are used to optimize user-friendliness and automatically deleted after your visit. We also use temporary cookies to optimize user-friendliness, which remain on your computer until deleted. These cookies allow us to recognize your browser on your next visit.

We also use cookies to collect statistical data about the use of our website, which are then analyzed to optimize our services for you (see section 4).

Your browser settings include options to inform you when cookies are placed on your computer, to only allow cookies on an individual basis, to accept cookies in particular cases or generally reject cookies and to turn off automatic cookie deletion when you close your browser. Deactivating cookies may restrict the functionality of this website. Data processing via cookies is legally governed by Article 6 (1) (f) General Data Protection Regulation (GDPR).

Server log files

The site provider automatically collects and saves information in server log files, which your browser then automatically transfers to us. This information includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is processed to ensure you connect to the website seamlessly, can comfortably use our website, to analyze system security and stability and for other administrative purposes. This data will not be merged with other data sources.

This data processing is legally governed by Article 6 (1) (f) GDPR.

Contact forms

If you send a request to a bulthaup partner via the “contact form” page, we will transmit your request and the data notified with it to the bulthaup partner. This will be done only for the purposes stated in the declaration of consent.

The declaration of consent which you can provide in these forms (but do not have to) has the following content:

Consent regarding data protection legislation:

Data Privacy Notice:

I agree to my above request and the data notified with it being transmitted by Bulthaup GmbH & Co KG as controller to the bulthaup partner stated in the legal information and to them being stored and used by bulthaup and the relevant partner for the purposes of responding to my request by e-mail and of sending bulthaup product information and associated service offerings by post, as well as for market research purposes.

Please note: Without your consent, your request will not receive a response. The data provided in the contact form will be processed on the basis of your consent (Article 6 (1) lit. a GDPR). You can revoke your consent to the processing and use of your data for the specified purposes at any time. Please direct any revocation to Bulthaup GmbH & Co KG, FAO Data Protection, 84155 Aich, Germany or send an e-mail to We will inform the relevant partner of your revocation.

The data which you input in these contact forms will remain stored until you ask us to delete them or until you revoke your consent with regard to storage.

Social media

Social media

Sharing content via plug-ins (Facebook, Pinterest)

So-called “social plug-ins” are used on our website to raise awareness of our company pursuant to Article 6 (1) (f) GDPR. We currently use plug-ins from Facebook and Pinterest. Data, including personal data, may be sent via these plug-ins to service providers in the USA and potentially used by these service providers.

bulthaup does not collect any personal data via the social plug-ins or any personal data about the use of plug-ins. A program prevents data from being transmitted to the service provider in the USA without the user’s knowledge. This solution ensures that for the moment, no personal data is transferred to the provider of the social plug-in when you visit bulthaup’s websites. Data can only be transmitted to the service provider and stored there if you click on one of the social plug-ins.

Access by the service provider

The service provider then receives the information that you have accessed the corresponding sub-page of our website. This happens regardless of whether you have an account with the service provider and whether you are logged in. If you are logged in to the service provider this will be directly assigned to your account. If you click on one of the social plug-ins and, for example, link this website, the service provider will also store this information in your user account and publicly share this association.

If you do not wish this assignment to your profile with the service provider you must log out before clicking on one of the social plug-ins.

We have no influence over whether and to what extent the service provider collects personal data. The scope, purpose and storage period of the collected data is also unknown. It must be assumed that, at a minimum, the IP address and information related to the device used are collected and used. It is also possible that the service provider uses cookies.

Service providers’ details

More information about how the service providers deal with data protection can be found on their websites:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA

Further information about the collection of data

Analytical tools and advertising

Analytical tools and advertising

We use the following tracking measures pursuant to Article 6 (1) sentence 1 (f) GDPR. We aim to ensure these tracking measures support the needs-based design and continued optimization of our website. We also use tracking measures to collect statistical data about how our website is used, which is then analyzed to optimize our services for you.

The respective purpose of data processing and data categories are to be taken from the respective tracking tools.

Google Analytics

This website uses the functions of the Google Analytics web analysis service. This is provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA. Google Analytics uses cookies. These are text files which are saved on your computer and enable your use of the website to be analyzed. The information generated by the cookie regarding your use of this website, such as browser type/version, operating system used, referrer URL (the website you previously visited), host name of the access computer (IP address) and the time of the server request, is usually transmitted to Google’s server in the USA and saved there.

We have activated IP anonymization on this website. Your IP address is truncated by Google within the member states of the European Union or in other signatory states party to this agreement across the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google uses this information to analyze your use of the website with the aim of generating reports on website activities and providing the site operator with other services associated with website and Internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be linked to other data held by Google.

You can prevent the saving of cookies by selecting the appropriate setting in your browser software; however, please note that doing so may preclude access to all functions of this website. You can also prevent the collection of data generated by the cookie and related to the usage of the web site (including your IP address) by Google and the processing of such data by Google by downloading and installing the browser plug-in, which is available at:

You can prevent the transfer of your data by Google Analytics by clicking the following link: This installs an opt-out cookie, which prevents your data from being collected when you visit this website in future Deactivate Google Analytics.

More information about how Google Analytics interacts with your user data can be found in Google’s Privacy Policy.

We have entered into a data processing agreement with Google.

Google Analytics Remarketing

Our websites also use the functions of Google Analytics remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.

This function enables advertising target groups created by Google Analytics remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. Accordingly, interest-related and personalized adverts are shown, which have been adapted in accordance with your previous usage behavior and surfing habits on one device (e.g. cellphone) and also shown on another of your devices (e.g. tablet or PC).

If you have provided the appropriate consent, Google will link your web and app browser histories with your Google account. This allows every device which you log in to with your Google account to have the same personalized adverts shown.

To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to your Google Analytics data to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account. Please visit the following to do so:

A potential summary of the data collected in your Google account is only carried out on the basis of your consent, which you can provide to or withdraw from Google (Article 6 (1) (a) GDPR).

More information and data protection information can be found in the Google Privacy Policy and Terms at:


This website uses the open source web analytics service Matomo.

With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which page views were made and from which region they came. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

IP anonymisation

We use IP anonymisation for the analysis with Matomo. This means that your IP address is shortened before analysis so that it can no longer be clearly assigned to you.

Cookieless analysis

We have configured Matomo in such a way that it does not save any cookies in your browser.


We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

Meta pixel

Our website uses Meta pixel to measure the conversion rate of visitor actions of Meta Platforms Inc. (formerly Facebook Inc.), 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

The Meta pixel can keep track of website visitors after they have been forwarded to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future ads to be optimized.

The data collected is anonymous for us as the site operator, we cannot trace any data back to determine the identity of a user. The data will, however, be stored and processed in such a way as to enable a link to be established to your user profile and Facebook may use the data for its own advertising purposes, in accordance with the Facebook Data Policy. As a result, Facebook may be able to show adverts on your Facebook page as well as outside Facebook. We cannot influence how this data is used as the site operator.

More information about how Facebook protects your privacy can be found in the Privacy Policy of Facebook:

You may also deactivate the “Custom Audiences” remarketing function in the adverts settings You must be logged in to Facebook to do so.

If you do not have a Facebook account, you may deactivate Facebook’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance:

Plugins and tools

Plugins and tools

Google Maps

This website uses an API from the map service Google Maps. These are provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, California 94043, USA.

It is necessary to store your IP address to use the functions of Google Maps. This information is usually transmitted to Google’s server in the USA and stored there. The site operator has no influence over this transmission of data.

We use Google Maps to display our websites in an appealing manner and help customers find our locations stated on the website. This is deemed a legitimate interest pursuant to Article 6 (1) (f) GDPR.

More information about how Google interacts with your user data can be found in Google’s Privacy Policy.

Rights in accordance with the General Data Protection Regulation

Rights in accordance with the General Data Protection Regulation

In accordance with the EU General Data Protection Regulation, you have a right of access (Article 15), a right to rectification and erasure (Articles 16, 17), the right to restrict processing (Article 18) and a right to data portability (Article 20), as well as the right to lodge a complaint with a supervisory authority (Article 77).

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, if justified due to reasons pertaining to your specific circumstances or if you are objecting to direct advertising. If you are objecting to advertising, you have a general right to object, which will be implemented by us without you having to provide details about your particular situation.

If you wish to exercise your right to withdraw your consent or object, it is sufficient to send an

Up-to-dateness of and changes to this Privacy Policy

Up-to-dateness of and changes to this Privacy Policy


This Privacy Policy is currently valid as of May 2018.

It may be necessary to make changes to this Privacy Policy due to further development of our website and services offered there, or on the basis of changes in legislation or to regulatory requirements.

© Copyright Bulthaup GmbH & Co KG, Bodenkirchen (Germany). All rights reserved.