Privacy policy

You can visit our websites without providing any personal information. Every time our website is accessed, usage data is transmitted by your browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider.

The processing is based on Art. 6(1)(f) GDPR and our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services. Server log files are generally deleted automatically after 7 days, unless there are concrete indications of misuse.

If you contact us via our contact form or by email, we process the details you provide (e.g. name, email address, content of the message) in order to handle your enquiry and in case follow-up questions arise.

The processing is based on Art. 6(1)(b) GDPR where the enquiry relates to a contractual relationship, or on Art. 6(1)(f) GDPR based on our legitimate interest in handling enquiries. The data is deleted once the enquiry has been fully dealt with, unless statutory retention obligations apply.

When you open a customer account, we collect your personal data to the extent stated there. The purpose of the processing is to improve your experience and to simplify the handling of the contract. The processing is based on Art. 6(1)(b) GDPR for the performance of the contract.

You may have your customer account deleted at any time by notifying us. Statutory retention obligations (e.g. for invoice data under §§ 147 AO, 257 HGB) remain unaffected.

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to deal with your enquiries. Providing the data is necessary for the conclusion of the contract. If it is not provided, no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR.

Your data is not passed on to third parties without your express consent. This does not apply to the service partners we need in order to perform the contractual relationship (e.g. payment service providers, hosting infrastructure providers, IT service providers). In all cases we strictly observe the statutory requirements.

Our website uses cookies. Cookies are small text files stored by the browser on a user's computer system. They allow our systems to recognise your browser when you return.

We distinguish between technically necessary cookies and optional analytics cookies. Necessary cookies are required to operate the website and are set on the basis of Art. 6(1)(f) GDPR (legitimate interest). Analytics cookies are only set with your express consent under Art. 6(1)(a) GDPR.

You can review and change your cookie settings at any time under Cookie settings. A complete overview of all cookies in use can be found there as well.

We use Google Analytics 4 provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Analytics is only activated once you have given your express consent via our cookie banner (Art. 6(1)(a) GDPR). Without consent, no analytics cookies are set and no tracking takes place.

GA4 processes data about your use of this website (pages accessed, time spent, interactions). We use Google Consent Mode v2, so GA4 records no measurement without your consent. Google processes the data on servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework (DPF, in force since July 2023), which ensures that data transfers to the USA comply with the GDPR.

You may withdraw your consent at any time with effect for the future under Cookie settings. Further information on Google Analytics is available at policies.google.com/privacy.

On our forms we use the CAPTCHA service Cloudflare Turnstile provided by Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA) to fend off automated requests (bots) and to ensure the security of our forms.

In doing so, technical information (including IP address and browser fingerprint) is transmitted to Cloudflare and processed to determine whether the request comes from a human or a bot. Turnstile does not set persistent tracking cookies. The processing is based on Art. 6(1)(f) GDPR and our legitimate interest in the security of our online services.

Cloudflare Inc. is certified under the EU-US Data Privacy Framework (DPF). Further information: cloudflare.com/privacypolicy.

Once the contract has been fully performed, the data is first stored for the duration of the warranty period and then in accordance with statutory retention periods, in particular those under tax and commercial law (§§ 147 AO, 257 HGB: 6 and 10 years respectively). It is deleted once those periods expire, unless you have consented to further processing and use.

Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing and to data portability.

To exercise your rights, please contact us using the contact details given in the imprint.

Under Art. 77 GDPR you have the right to lodge a complaint with the competent data protection supervisory authority if you consider that the processing of your personal data is unlawful. The competent supervisory authority in Bavaria is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Where the processing of personal data described here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object at any time, with effect for the future, on grounds relating to your particular situation. Following an objection, processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.

Where personal data is processed for direct marketing purposes, you may object to that processing at any time by notifying us. Following an objection, we will cease processing the data concerned for direct marketing purposes.