Data Protection

1. Data Protection at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below.

Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?
Some of your data is collected because you provide it to us, e.g., when filling out a contact form.
Other data is collected automatically or after your consent when you visit the website through our IT systems. These are primarily technical data (e.g., web browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.

What do we use your data for?
Some data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behavior.

What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For this and other questions regarding data protection, you can contact us at the address provided in the imprint at any time.
Analysis Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically analysed, primarily using so-called analysis programs. Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)

External Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact inquiries, meta- and communication data, contract data, contact information, names, website accesses, and other data generated via a website.
The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).
Our host will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.

Our Host:
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp

Conclusion of a Data Processing Agreement
To ensure data protection-compliant processing, we have concluded a data processing agreement with our host.

3. General Information and Mandatory Notices

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it, as well as the purposes of processing.
Please note that data transmission over the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Responsible Entity
The responsible entity for data processing on this website is:

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration
Unless otherwise specified in this privacy policy, your personal data will remain with us until the purpose of data processing ceases. If you request deletion or revoke consent, your data will be deleted unless we have legally permissible reasons for retaining it (e.g., tax or commercial retention periods). In such cases, deletion occurs after these reasons no longer apply.

Note on Data Transfer to the USA
This website includes tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of these companies. The USA is not considered a secure third country under EU data protection law. US companies are obligated to provide personal data to security authorities without legal recourse for the data subject. Therefore, it cannot be excluded that US authorities (e.g., intelligence agencies) may process, analyse, and store your data for surveillance purposes. We have no influence on these processing activities.

Revocation of Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent at any time. The legality of the processing carried out prior to revocation remains unaffected.
Right to Object in Specific Cases and to Direct Marketing (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time for reasons arising from your particular situation. This applies also to profiling based on these provisions. If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds or for legal claims.
If your personal data is processed for direct marketing, you have the right to object at any time. If you object, your personal data will no longer be used for such purposes.

Complaint to Supervisory Authority
In case of GDPR violations, you have the right to lodge a complaint with a supervisory authority, especially in the member state of your habitual residence, workplace, or place of the alleged violation.

Right to Data Portability
You have the right to receive data you provided to us or that we process automatically for the fulfillment of a contract in a structured, commonly used, machine-readable format.

SSL or TLS Encryption
This website uses SSL/TLS encryption for security. You can recognize encrypted connections by “https://” and the lock symbol in the browser.

Information, Deletion, and Correction
You have the right at any time to obtain free information about your stored personal data, its origin, recipients, purpose, and the right to correct or delete it.

Right to Restriction of Processing
You may request restriction of processing in certain cases, e.g., disputed accuracy, unlawful processing, or pending legal claims.

Objection to Advertising Emails
Use of published contact data for sending unsolicited advertising and informational materials is hereby objected to.

4. Data Collection on This Website

Cookies
Our website uses “cookies,” small text files that do not harm your device. Cookies may be session-based or permanent. Third-party cookies may also be used. Cookies are used for technical functionality, user analysis, or advertising.
You can adjust your browser settings to manage cookies.

Borlabs Cookie Consent
Our website uses Borlabs Cookie to manage consent. Data is stored locally and not shared with Borlabs.

Server Log Files
The provider automatically collects server log data such as browser type, OS, referrer URL, hostname, request time, and IP address. No merging with other data occurs.

Contact via Email, Phone, or Fax
Data sent via contact methods is processed for handling inquiries. It is not shared without consent.

5. Analytics and Advertising

Google Analytics
This website uses Google Analytics, operated by Google Ireland Limited. Data may be transferred to the USA under standard contractual clauses. IP anonymization is activated.
You can prevent data collection via a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de

Demographics
Google Analytics demographics features allow reporting by age, gender, and interests.

Storage Duration
Data linked to cookies, user IDs, or advertising IDs is anonymized or deleted after 14 months.

6. Newsletter

Newsletter Data
To subscribe, we require your email and verification of ownership. Data is used solely for sending the newsletter and is not shared. Processing is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.

Sendinblue
We use Sendinblue for newsletter delivery. Data is stored on their servers in Germany. Newsletter activity can be analysed for open rates, clicks, and conversions. Data processing is based on consent.

7. Plugins and Tools

Google Web Fonts (Local Hosting)
This site uses Google Web Fonts, which are hosted locally. No connection to Google servers occurs.
More information:

https://developers.google.com/fonts/faq
https://policies.google.com/privacy?hl=de