Privacy
Privacy policy
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information about data protection, please refer to the privacy policy below.
Data collection on this website
Who is responsible for collecting data on this website?
Data on this website is processed by the website operator. You can find their contact details in the section entitled ‘Information about the controller’ in this privacy policy.
How do we collect your data?
Some of your data is collected when you provide it to us. This may include, for example, information you enter in a contact form.
Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data, such as your web browser, operating system or the time of your visit. This data is collected automatically as soon as you access this website.
What do we use your data for?
Some data is collected to ensure that the website works correctly. Other data may be used to analyse your browsing behaviour. Where contracts can be concluded or initiated through the website, the data you provide is also processed for quotations, orders or other enquiries relating to a contract.
What rights do you have regarding your data?
You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or erased. If you have consented to data processing, you can withdraw that consent at any time with effect for the future. Under certain circumstances, you also have the right to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about this or any other questions concerning data protection.
Analytics and third-party tools
When you visit this website, your browsing behaviour may be analysed statistically. This is primarily done using analytics software.
Detailed information about this analytics software can be found in the privacy policy below.
2. Hosting
We host our website content with the following provider:
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (referred to below as IONOS). When you visit our website, IONOS collects various log files, including your IP addresses. For details, please refer to the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.
We use IONOS on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in providing our website as reliably as possible. Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent can be withdrawn at any time.
Data processing agreement
We have entered into a data processing agreement for the use of the above service. This agreement is required by data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Privacy
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.
Various personal data is collected when you use this website. Personal data is information that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this takes place.
Please note that transmitting data over the internet, for example when communicating by email, may involve security vulnerabilities. It is not possible to provide complete protection against access by third parties.
Information about the controller
The controller responsible for data processing on this website is:
Marcel Hess
Zur Obermühle 1
DE - 86561 Aresing
Email:
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.
Retention period
Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose of processing no longer applies. If you make a valid request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining it, such as retention periods under tax or commercial law. In that case, the data will be erased once those grounds no longer apply.
General information on the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of data under Article 9(1) GDPR are processed. If you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) TDDDG. Consent can be withdrawn at any time. Where your data is required to perform a contract or take pre-contractual steps, we process it on the basis of Article 6(1)(b) GDPR. We also process your data on the basis of Article 6(1)(c) GDPR where this is necessary to comply with a legal obligation. Processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The following sections of this privacy policy explain the legal bases applicable in each case.
Recipients of personal data
In the course of our business activities, we work with various external parties. This sometimes requires personal data to be transferred to them. We disclose personal data to external parties only where this is necessary to perform a contract, where we are legally obliged to do so, for example when disclosing data to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits the disclosure. When using processors, we disclose our customers' personal data only on the basis of a valid data processing agreement. Where processing is carried out jointly, a joint controllership agreement is concluded.
Withdrawing your consent to data processing
Many processing operations require your express consent. You can withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Right to object to data collection in specific circumstances and to direct marketing (Article 21 GDPR)
WHERE DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS FOR THE PROCESSING IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right is without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, either for yourself or for a third party, in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will take place only where technically feasible.
Access, rectification and erasure
Within the scope of applicable law, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, the right to have this data rectified or erased. You can contact us at any time about this or other questions concerning personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You can contact us at any time to exercise this right. The right to restriction of processing applies in the following circumstances:
- If you contest the accuracy of the personal data we hold about you, we generally need time to verify it. For the duration of this verification, you have the right to request restriction of the processing of your personal data.
- If your personal data has been or is being processed unlawfully, you can request restriction of processing instead of erasure.
- If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of erasure.
- If you have objected under Article 21(1) GDPR, your interests must be balanced against ours. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
Where processing of your personal data has been restricted, that data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the browser address changing from ‘http://’ to ‘https://’ and by the padlock icon in your browser's address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Remembering appearance and language
When you change the appearance or language, we save your selection in your browser’s local storage. Only the selected appearance (light or dark) and language (German or English) are stored. These settings are not transmitted to us. You can reset them by clearing this website’s data in your browser.
Server log files
The hosting provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring that the website functions correctly and can be optimised. Collecting server log files is necessary for this purpose.
Enquiries by email
If you contact us by email, we store and process your enquiry, including all personal data it contains, such as your name and the content of the enquiry, for the purpose of handling your request. We do not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary to take pre-contractual steps. In all other cases, processing is based on our legitimate interest in handling enquiries effectively (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where requested. Consent can be withdrawn at any time.
The data you send us in an enquiry remains with us until you request its erasure, withdraw your consent to storage, or the purpose of storage no longer applies, for example once your enquiry has been fully handled. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.
5. Social media
eRecht24 Safe Sharing Tool
Content on this website can be shared on social networks such as Facebook, X and others in compliance with data protection requirements. This website uses the eRecht24 Safe Sharing Tool. This tool establishes direct contact between networks and users only when a user actively clicks one of the buttons. Clicking the button constitutes consent within the meaning of Article 6(1)(a) GDPR and Section 25(1) TDDDG. This consent can be withdrawn at any time with effect for the future.
This tool does not automatically transmit user data to the operators of these platforms. If a user is logged into a social network, an information window appears when using the social media elements of Facebook, X and others, allowing the user to confirm the text before posting.
Our users can share this website's content on social networks in compliance with data protection requirements without the network operators creating complete browsing profiles.
This service is used to obtain the consent required by law for the use of certain technologies. The legal basis is Article 6(1)(c) GDPR.
6. Analytics tools and advertising
Plausible Analytics
We use Plausible Analytics on our website. The provider is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.
Plausible Analytics allows us to analyse the behaviour of our website visitors. In particular, the following data is collected for this purpose: page URL, HTTP request, HTTP referrer, browser, operating system, device type and IP address. The HTTP request and IP address are stored in a hash for 24 hours. Within that period, a user can be recognised when returning to the website. It is not possible to identify the individual.
Where consent has been obtained, the above service is used exclusively on the basis of Article 6(1)(a) GDPR and Section 25 TDDDG. Consent can be withdrawn at any time. Where no consent has been obtained, the service is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in obtaining meaningful analysis of website visitors' behaviour.
Data processing agreement
We have entered into a data processing agreement for the use of the above service. This agreement is required by data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
7. Plugins and tools
Cloudflare Turnstile
We use Cloudflare Turnstile (referred to below as ‘Turnstile’) on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (referred to below as ‘Cloudflare’).
Turnstile checks whether data entered on this website, for example in a contact form, is entered by a person or an automated program. To do this, Turnstile analyses website visitors' behaviour using various characteristics.
This analysis starts automatically as soon as a visitor accesses a website with Turnstile enabled. Turnstile evaluates various information, such as the IP address, the time spent on the website and mouse movements made by the user. The data collected during this analysis is forwarded to Cloudflare.
Data is stored and analysed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online services against abusive automated scanning and spam. Where relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user's device, such as device fingerprinting, within the meaning of the TDDDG. Consent can be withdrawn at any time.
Data processing is based on standard contractual clauses, which can be found here: https://www.cloudflare.com/cloudflare-customer-scc/.
Further information about Cloudflare Turnstile can be found in the privacy terms at https://www.cloudflare.com/cloudflare-customer-dpa/.
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5666.