Privacy Policy

This Privacy Policy provides detailed information about what happens to your personal data when you visit our website bhattilabs.com. Any data that allows you to be personally identified is personal data. When processing your data, we strictly adhere to the legal requirements, in particular the General Data Protection Regulation ("GDPR"). Your secure visit to our website is very important to us.

The party responsible for the collection and processing of personal data on this website under data protection law is:

• Name: Daud Bhatti
• Address: Panoramastraße 51, 72622 Nürtingen, Germany
• Email: info@bhattilabs.com
• Phone: +49 1529 2620128

When you access our website, we automatically collect access data transmitted by your browser and store it in server log files. This includes:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Date and time of the server request
• IP address currently in use

It is generally not possible, nor is it our intention, to assign this data to a specific person. Processing is carried out in accordance with Art. 6(1)(f) GDPR to protect our legitimate interest in improving the stability and functionality of our website.

This website is provided on a virtual server operated by BhattiLabs at manitu GmbH, Welvertstraße 2, 66606 St. Wendel, Germany.

When you visit our website, the hosting provider processes technically necessary connection and access data (e.g. IP address, browser information, date and time of access) to enable secure and stable operation, error analysis and abuse prevention.

Processing is based on Art. 6(1)(f) GDPR.

For sending emails via the contact form we use the separate service Resend.

This website currently uses only technically necessary cookies. Analytics, marketing or tracking cookies are not used at this time.

Technically necessary cookies are small text files stored on your device that are required for the proper operation of the website. Cookies cannot execute programs or transfer viruses to your computer.

Storage of technically necessary cookies is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically flawless and optimised provision of our services.

You can configure your browser to notify you when cookies are being set and decide whether to accept them on a case-by-case basis, in general, or to reject them entirely. Please note that the functionality of this website may be limited if you disable cookies.

If you contact us by email or via the contact form, the data you submit — including your contact details — will be stored so we can process your request and respond to any follow-up questions. This data will not be shared with third parties without your explicit consent.

Processing of data submitted via the contact form is carried out pursuant to Art. 6(1)(b) GDPR insofar as your request serves the performance of pre-contractual measures.

In all other cases, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR or — where consent is required — on Art. 6(1)(a) GDPR.

Any consent granted may be revoked at any time with effect for the future. The lawfulness of processing carried out prior to revocation remains unaffected.

Data submitted via the contact form is stored until you request its deletion, revoke your consent, or the purpose for storage no longer applies. Statutory retention periods remain unaffected.

Email delivery

We use the service Resend to send messages submitted through the contact form and the automatic confirmation email.

The personal data required for delivery is processed for this purpose.

Processing is carried out exclusively for the purpose of securely delivering the emails and handling your request. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Our website includes a WhatsApp button that allows you to start a chat with BhattiLabs directly.

When you click the button, you will be redirected to the WhatsApp service. In doing so, personal data (e.g. your IP address) may be transmitted to WhatsApp.

Meta Platforms Ireland Limited is solely responsible for the processing of personal data within WhatsApp.

Further information is available at: https://www.whatsapp.com/legal/privacy-policy

We assure you that personal data you provide to us (such as your name, address or email address) will not be sold to third parties or otherwise used commercially. Your data will be processed solely for the purpose of correspondence with you and to fulfil the purpose for which you provided it.

Data automatically collected during your visit to our website is used exclusively for the purposes stated above. No other use is made of the data.

The protection of your personal data is important to us. As a rule, we do not share your data with third parties unless we are legally obliged to do so or you have given us your explicit consent.

Our website uses SSL/TLS encryption to ensure the security and protection of confidential content in transit. This particularly applies to requests you send to us as the operator of the website. An encrypted connection is indicated by "https://" in your browser's address bar and the lock icon.

When SSL/TLS encryption is active, data you transmit to us cannot be read by unauthorised third parties.

Your personal data submitted through our website is stored only for as long as necessary to achieve the respective purpose of processing. In accordance with commercial and tax retention obligations, however, certain data may be stored for up to 10 years.

As a data subject you have the following rights vis-à-vis the controller in accordance with the applicable legal provisions:

A. Right to withdraw consent

Many data processing operations are only possible with your explicit consent. Where processing is based on your consent, you have the right to withdraw it at any time pursuant to Art. 7(3) GDPR, with effect for the future. The lawfulness of processing carried out until withdrawal remains unaffected.

B. Right of access

Pursuant to Art. 15 GDPR you have the right to obtain confirmation as to whether we process your personal data and, if so, to receive information about that data, including the purposes of processing, categories of data, recipients, planned storage duration, rights to rectification, erasure, restriction, objection, complaint to a supervisory authority, the origin of the data, and the existence of automated decision-making.

C. Right to rectification

You have the right pursuant to Art. 16 GDPR to request the correction of inaccurate personal data concerning you and/or the completion of incomplete data.

D. Right to erasure

You have the right pursuant to Art. 17 GDPR to request the erasure of your personal data, in particular where the data is no longer required for the purposes for which it was collected, you withdraw your consent, you object to the processing, the processing is unlawful, or erasure is required to comply with a legal obligation.

E. Right to restriction of processing

Pursuant to Art. 18 GDPR you have the right to request the restriction of processing of your personal data. You may contact us at any time to exercise this right. Contact details can be found in the imprint.

F. Right to notification

If you exercise your right to rectification, erasure or restriction of processing, we are obliged pursuant to Art. 19 GDPR to inform all recipients to whom the data has been disclosed, unless this proves impossible or involves disproportionate effort.

G. Protection from automated decision-making (profiling)

Pursuant to Art. 22 GDPR you have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or significantly affects you in a similar way.

H. Right to data portability

Where processing of your personal data is based on consent pursuant to Art. 6(1)(a) or Art. 9(2) (a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and is carried out by automated means, you have the right pursuant to Art. 20 GDPR to receive the data you provided in a structured, commonly used and machine-readable format and to transmit this data to another controller.

I. Right to object

Where we process your personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation; this also applies to profiling based on those provisions.

If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time; this also applies to profiling to the extent that it is related to such direct marketing.

J. Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a competent supervisory authority. Our competent supervisory authority is:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35, 70191 Stuttgart
Postfach 10 29 32, 70025 Stuttgart
Phone: +49 (0)711 / 61 55 41-0
Email: poststelle@lfdi.bwl.de
Web: https://www.baden-wuerttemberg.datenschutz.de

This Privacy Policy takes effect on 19 August 2026. We reserve the right to amend this policy as necessary in compliance with applicable data protection laws — for example to meet new legal requirements or to reflect changes to our website or new services offered through it. The version of the Privacy Policy in effect at the time of your visit is binding.

Any changes to this Privacy Policy will be published on this page to keep you fully informed about which personal data we collect, how we process it, and the conditions under which it may be shared.