Privacy Policy

We take the protection of your data seriously. This policy describes what information we process on bauer-group.ge and across our marketing and CRM channels, who it is shared with, and how you can opt out. We are registered in Georgia — a non-EU country — and operate under Georgian data protection law. Where visitors from the EU, the United Kingdom, Switzerland, the United States, or other jurisdictions are concerned, we additionally align with internationally recognised baseline standards.

1. Controller

The controller responsible for processing personal data within the meaning of this policy is:

BAUER GROUP LLC
3 Ana Politkovskaia Street
Building 6
0186 Tbilisi
Georgia

Email: [email protected]
Phone: +995 32 250 12 20

For privacy questions or to exercise your rights, please contact the email address above.

2. What data we collect

We collect data in three contexts:

Data you actively provide — when you use our contact form, send us an email, sign up for our newsletter, or request a mandate. This typically includes name, email address, phone number, company name, and the content of your message.

Data collected automatically when you visit the site — server log files (IP address, date and time of access, requested URL, referrer, user agent, HTTP status code). This data is required to deliver the website, defend against attacks, and troubleshoot errors.

Data from embedded third-party services — once you consent to cookies or tracking, the providers listed in section 4 collect additional data (see there).

3. Cookies and similar technologies

Our website uses cookies and comparable storage technologies (local storage, pixels, tags). We distinguish between:

• Strictly necessary cookies — for example to store your language and consent preferences. They are set without consent because the website cannot function reliably without them.
• Analytics and marketing cookies — for reach measurement, conversion tracking, and retargeting (see section 4). These are set only after you give consent through our cookie banner.

You can withdraw your consent at any time by reopening the cookie settings or by using the browser controls described in section 6.

4. Services we use

We use the following services. All providers are based outside Georgia — your data is therefore transferred internationally (see section 5).

4.1 Cloudflare (content delivery and security)

Provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Cloudflare delivers our website through a global CDN and protects it against attacks (DDoS, bot traffic). When you access our pages, your IP address is transmitted to Cloudflare to establish the connection and is briefly stored in log files. Cloudflare is engaged purely as a processor.

Privacy: www.cloudflare.com/privacypolicy

4.2 Google Tag Manager

Provider: Google LLC / Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager manages our marketing and analytics tags. It does not store cookies itself, but it loads the Google services listed below as soon as you have given consent. Without consent our Tag Manager does not load any personal tracking logic.

Privacy: policies.google.com/privacy

4.3 Google Analytics 4

We use Google Analytics 4 to evaluate how our website is used. Processed data includes the anonymised IP address, device and browser information, approximate geographic region, pages viewed, time on site, and traffic source. We operate GA4 with IP anonymisation enabled; data is processed in the United States and the EU. A retention period of 14 months is configured.

Opt-out: tools.google.com/dlpage/gaoptout or via our cookie banner.

4.4 Google Ads (including conversion tracking and remarketing)

We use Google Ads to deliver advertisements and measure their performance. When a conversion occurs (for example, after clicking an ad and submitting a request), a cookie is set on your device that allows Google to attribute the click. For remarketing, your browser is assigned a pseudonymous ID so we can reach you with relevant ads on partner websites.

Ad settings: adssettings.google.com

4.5 Meta platforms (Facebook, Instagram)

Provider: Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA / Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

We operate profiles on Facebook and Instagram and may use the Meta Pixel on our website to measure ad effectiveness and build custom audiences. Processed data includes pixel events (page view, conversion), device-level data, and — if you are logged in to Meta — your Meta user ID. Meta also uses this data for its own purposes (for example, ad delivery across the entire Meta network).

Privacy: facebook.com/privacy/policy · privacycenter.instagram.com/policy

4.6 YouTube (embedded videos)

Provider: Google Ireland Ltd. (see above).

Embedded YouTube videos load in the privacy-enhanced mode (youtube-nocookie.com). Only when you click a video does your browser establish a connection to Google and transmit your IP address along with device and browser information. If you are logged in to Google, the request can be associated with your account.

4.7 TikTok

Provider: TikTok Technology Ltd., 10 Earlsfort Terrace, Dublin 2, Ireland (for users in the EU/UK) / TikTok Inc., 5800 Bristol Pkwy, Culver City, CA 90230, USA.

We maintain a TikTok presence and may use the TikTok Pixel to measure ad performance and build audiences. Transmitted data includes pixel events, device data, and — for logged-in users — the TikTok user ID.

Privacy: tiktok.com/legal/privacy-policy

4.8 X (formerly Twitter)

Provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland / X Corp., 1355 Market Street, San Francisco, CA 94103, USA.

We link to our X account and may use the X conversion pixel to measure clicks and conversions from X campaigns. The pixel processes data comparable to the other advertising pixels.

Privacy: x.com/privacy

4.9 HubSpot CRM and marketing automation

Provider: HubSpot Ireland Ltd., 1 Sir John Rogerson’s Quay, Dublin 2, Ireland / HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA.

HubSpot is our central CRM and marketing platform. When you fill out our contact form, subscribe to a newsletter, book a meeting, or correspond with us by email, your master data (name, email, phone, company), the content of your request, and interaction metadata (opened emails, clicks, page views) are stored in HubSpot. HubSpot also sets tracking cookies that let us follow your journey across multiple sessions — this happens only after you have given consent.

Privacy: legal.hubspot.com/privacy-policy

4.10 Email marketing

If you subscribe to our newsletter or targeted mailings, we process your email address, optionally your name and topic preferences, and dispatch metadata (send date, open and click rates, bounces). Sending and tracking are handled through HubSpot (see 4.9). You can unsubscribe at any time via the unsubscribe link in every email or by replying to [email protected].

5. International data transfers

BAUER GROUP LLC is based in Georgia. The providers listed in section 4 process your data in, among other locations, the United States, the European Union, the United Kingdom, and Singapore. Where data is transferred to countries that do not provide a level of protection equivalent to EU or UK data protection law, our providers rely on contractual safeguards (such as the EU Standard Contractual Clauses) or on self-certifications such as the EU-US Data Privacy Framework. By using our website, you consent to this international transfer.

6. Choices and opt-outs

You have the following choices at any time:

• Adjust cookie settings — reopen the banner via the footer link.
• Browser-level protection — send “Do Not Track” headers, block third-party cookies, use the tracking protection of your browser (Safari, Firefox, Brave).
• Disable advertising — through the platform settings at Google, Meta, TikTok, and X.
• Unsubscribe from newsletters — click the unsubscribe link in any email.
• Delete request data — send an informal email to [email protected].

7. Retention

We retain personal data only for as long as necessary for the respective processing purpose or as required by law. Mandate- and accounting-related records are subject to Georgian tax and commercial retention obligations. Newsletter and marketing data is processed until you unsubscribe. Once the purpose has been fulfilled and no retention obligation applies, we delete or anonymise the data. For questions about the concrete retention period of a specific record, write to us at [email protected].

8. Security

We implement technical and organisational measures to protect your data — including TLS encryption when accessing the site, access controls on our back-office systems, regular updates, and backups. However, absolute security cannot be guaranteed on the internet.

9. Changes to this policy

We update this privacy policy when the services we use or the legal framework change. The current version is always available on this page. We announce material changes via newsletter or a notice on the homepage.

Last updated: May 2026