Privacy Policy

1. Data protection overview

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on the topic of data protection can be found in our privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information about the responsible party” in this privacy policy.

How do we collect your data?

On the one hand, your data is collected by you providing it to us. This may include data you enter into a contact form.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This mainly includes technical data (e.g., browser type, operating system, or time of the page visit). The collection of this data occurs automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure error-free operation of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contractual offers, orders, or other inquiries.

What rights do you have regarding your data?

You have the right to request information at any time, free of charge, about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have consented to data processing, you may revoke this consent at any time with effect for the future. In certain circumstances, you have the right to request restriction of the processing of your personal data. Furthermore, you have a right to lodge a complaint with the responsible supervisory authority.

You can contact us at any time regarding these and any other questions on the topic of data protection.

Analytics tools and third-party tools

When visiting this website, your surfing behavior may be statistically evaluated. This is done primarily with analytics programs.

Detailed information about these analytics programs can be found in the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

Alfahosting

The provider is Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany (hereinafter “Alfahosting”). When you visit our website, Alfahosting records various log files, including your IP address.

For details, please refer to Alfahosting’s privacy policy: https://alfahosting.de/datenschutz/.

The use of Alfahosting is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible. If consent has been requested, data processing is carried out exclusively based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided the consent includes storing cookies or accessing information on the user’s device (e.g., device fingerprinting). Consent may be revoked at any time.

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various pieces of personal data are collected. Personal data is data that can personally identify you. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this takes place.

We point out that data transmission via the Internet (e.g., communication by email) may contain security gaps. Complete protection of data against access by third parties is not possible.

Information about the responsible party

The party responsible for data processing on this website is:

Placeholder

Phone: [Phone number of responsible party]
Email: [Email address of responsible party]

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage duration

Unless a more specific storage duration is stated in this privacy policy, your personal data remains with us until the purpose for data processing ceases to apply. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods required by tax or commercial law); in such cases, deletion occurs after these reasons no longer apply.

General information on the legal basis of data processing on this website

If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special data categories are processed. If you expressly consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), processing is additionally based on § 25(1) TDDDG. Consent may be revoked at any time. If your data is required for the performance of a contract or pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. If processing is required to fulfill a legal obligation, the legal basis is Art. 6(1)(c) GDPR. Data may also be processed based on our legitimate interests according to Art. 6(1)(f) GDPR. The specific legal basis applicable in each individual case is explained in this privacy policy.

Notice regarding data transfer to third countries that are not secure under data protection law and transfer to US companies that are not DPF-certified

We use tools from companies located in third countries that are not considered secure under EU data protection law, as well as US-based tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to and processed in these countries. We point out that no data protection level comparable to that of the EU can be guaranteed in such countries.

The USA is generally considered a safe third country if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or provides suitable additional safeguards. Information on transfers to third countries, including recipients of data, can be found in this privacy policy.

Recipients of personal data

In the course of our business activities, we work with various external parties. In some cases, it is necessary to transfer personal data to these external parties. We only transfer data to external parties if necessary for contract fulfillment, if we are legally required to do so (e.g., tax authorities), if we have a legitimate interest based on Art. 6(1)(f) GDPR, or if we are permitted to do so by another legal basis. When using processors, we only transfer personal data based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Revoking your consent to data processing

Many data processing processes are only possible with your explicit consent. You may revoke any previously granted consent at any time. The legality of the data processing carried out until the revocation remains unaffected.

Right to object to data collection in special cases and direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING; THIS ALSO APPLIES TO PROFILING RELATED TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in their habitual residence, workplace, or place of alleged infringement. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive the data we process automatically based on your consent or in performance of a contract, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only occur as far as it is technically feasible.

Access, correction, and deletion

Within the applicable legal regulations, you have the right to request information free of charge regarding your stored personal data, its origin, recipients, and purpose of data processing, as well as the right to correct or delete this data. You may contact us at any time regarding this and other questions about personal data.

Right to restriction of processing

You have the right to request restriction of processing of your personal data. You may contact us at any time regarding this. The right to restriction exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually require time to verify this. For the duration of the review, you have the right to request restriction of processing.
If the processing of your personal data was or is unlawful, you may request restriction instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend, or establish legal claims, you may request restriction instead of deletion.
If you have filed an objection under Art. 21(1) GDPR, an assessment must be made as to whose interests outweigh the other. Until it is determined whose interests prevail, you have the right to request restriction of processing.

If you restrict the processing of your personal data, such data may—apart from being stored—only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content (e.g., orders or inquiries), this site uses SSL or TLS encryption. You can recognize an encrypted connection because the browser address changes from “http://” to “https://” and by the lock icon in the browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to advertising emails

The use of contact data published within the legal notice obligation for sending unsolicited advertising and informational materials is hereby rejected. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

4. Data collection on this website

Cookies

Our website uses “cookies.” Cookies are small data packages that do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them or your browser automatically deletes them.

Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies allow the integration of certain third-party services (e.g., payment processing).

Cookies serve various functions. Many cookies are technically required to ensure certain website features (e.g., shopping cart or video display). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies required for electronic communication processes, providing desired website features (e.g., shopping cart), or optimizing the website (e.g., audience measurement) are stored based on Art. 6(1)(f) GDPR unless another legal basis is indicated. The website operator has a legitimate interest in storing necessary cookies for a technically error-free and optimized service. If consent to store cookies or similar technologies is requested, processing is based solely on this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent may be revoked at any time.

You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, prevent cookie acceptance for specific cases or in general, and enable automatic deletion of cookies when closing the browser. If cookies are disabled, the website's functionality may be limited.

Details on what cookies and services are used on this website can be found in this privacy policy.

Consent with ConsentManager

Our website uses the consent technology of ConsentManager to request and document your consent to store specific cookies or use specific technologies. Provider: Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter “ConsentManager”).

When you enter our website, a connection to ConsentManager’s servers is established to obtain your consent regarding cookie usage. ConsentManager then stores a cookie in your browser to assign granted or revoked consents. The data is stored until you request deletion, delete the ConsentManager cookie, or the purpose of storage no longer applies. Mandatory legal storage periods remain unaffected.

The use of ConsentManager is based on Art. 6(1)(c) GDPR.

Contact form

If you submit inquiries to us via the contact form, your information from the form, including the contact details you provide there, will be stored by us to process your request and for possible follow-up questions. We do not pass this data on without your consent.

Data processing is based on Art. 6(1)(b) GDPR if your request relates to a contract or is required for pre-contractual actions. In all other cases, data processing is based on our legitimate interest in efficiently handling inquiries (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR), if requested; consent can be revoked at any time.

Data entered into the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for storage no longer applies (e.g., after completion of your request). Mandatory legal requirements—especially retention periods—remain unaffected.

Request via email, phone, or fax

If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, request), will be stored and processed for the purpose of handling your request. We do not pass on this data without your consent.

Data processing is based on Art. 6(1)(b) GDPR if your inquiry relates to a contract or is required for pre-contractual actions. In all other cases, processing is based on our legitimate interest in effectively responding to inquiries (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR), if requested; consent may be revoked at any time.

Data you send us via inquiries remains with us until you request deletion, revoke your consent to storage, or the purpose for storage no longer applies (e.g., after processing your request). Mandatory legal storage requirements remain unaffected.

Communication via WhatsApp

We use the instant messaging service WhatsApp to communicate with customers and third parties. Provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication is encrypted end-to-end (peer-to-peer), preventing WhatsApp or third parties from accessing message content. However, WhatsApp receives metadata (e.g., sender, recipient, time). WhatsApp states it shares user data with its parent company Meta in the USA. For details, see WhatsApp’s privacy policy: https://www.whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is based on our legitimate interest in quick and effective communication with customers and business partners (Art. 6(1)(f) GDPR). If consent has been requested, processing is based solely on consent; consent may be revoked at any time.

Messages exchanged via WhatsApp remain with us until you request deletion, revoke your consent, or the storage purpose no longer applies (e.g., after your request is resolved). Legal retention requirements remain unaffected.

The company is certified under the “EU-US Data Privacy Framework” (DPF). This agreement ensures compliance with EU data protection standards when processing data in the USA. More information: https://www.dataprivacyframework.gov/participant/7735.

We use WhatsApp in the “WhatsApp Business” version.

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details: https://www.whatsapp.com/legal/business-data-transfer-addendum.

Adobe Fonts

This website uses web fonts from Adobe to ensure a consistent display of certain typefaces. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you access this website, your browser loads the required fonts directly from Adobe in order to display them correctly on your device. In doing so, your browser establishes a connection to Adobe’s servers in the USA. This informs Adobe that this website was accessed via your IP address. According to Adobe, no cookies are stored when providing these fonts.

The storage and analysis of data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If corresponding consent was requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.

Further information about Adobe Fonts can be found at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.

You can find Adobe’s privacy policy at: https://www.adobe.com/de/privacy/policy.html

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can find more information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5660.

https://www.dataprivacyframework.gov/participant/6347.

Google Maps

This site uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service enables us to embed map material on our website.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to and stored on a Google server in the USA. The provider of this site has no influence over this data transfer. If Google Maps is activated, Google may use Google Fonts for the uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an attractive presentation of our online offerings and to make it easy to find the locations we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If corresponding consent was requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

More information about how user data is handled can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.