Data protection declaration

Name and contact details of the controller

The controller for the processing of personal data pursuant to Article 4(7) GDPR can be found in the imprint.

Name and contact details of the data protection officer

We are not legally obliged to appoint a data protection officer.

External hosting

This website is hosted by an external service provider (web host). The personal data that is recorded on this website is stored on the web host’s servers. This may include IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website accesses and other data that is generated via a website.

The web host is used for the purpose of contract fulfilment towards our potential and existing customers (Article 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of our online services via a professional provider (Article 6(1)(f) GDPR). If the relevant consent has been requested, processing only takes place pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the Telecommunications and Digital Services Data Protection Act (TDDDG). Consent may be revoked at any time.

Our web host will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.

We use the following web host:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur

We have entered into a data processing agreement (DPA) with the provider mentioned above. This agreement is required under data protection law and ensures that the provider processes personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.

Use of our website

When accessing our website, the browser used on your terminal device automatically sends information to our provider’s server. This information is temporarily stored in a so-called log file.

The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer
• Language set in the browser
• Type of browser used and operating system of your computer in the respective version
• Whether JavaScript and cookies have been accepted
• Screen resolution and resolution density as well as screen size of the output device
• Access date and time
• Your time zone
• Name of your access provider
• Name and URL of the accessed file
• Website from which the access is made (referrer URL)

We process the aforementioned data for the following purposes:

• Ensuring smooth connection to the website,
• ensuring comfortable use of our website,
• analysis of the system security and stability and
• for other system administration purposes such as troubleshooting.

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest results from the data collection purpose listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you as a person.

The IP address will be deleted from all systems used in connection with the operation of these websites after seven days at the latest. It is then no longer possible for us to establish a connection between the remaining data and a person.

General information on the legal basis

If you have consented to the processing of your data, we process your personal data pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, provided that special categories of data pursuant to Article 9(1) GDPR are being processed. In the event of explicit consent to the transfer of personal data to third countries, data processing also takes place pursuant to Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your terminal device (e.g. via device fingerprinting), data processing also takes place pursuant to Section 25(1) TDDDG. Consent may be revoked at any time. If your data is required for the performance of a contract or in order to take steps prior to entering into a contract, we process your data pursuant to Article 6(1)(b) GDPR. Furthermore, we process your data to the extent that is required to comply with a legal obligation pursuant to Article 6(1)(c) GDPR. Data processing may also take place based on our legitimate interest pursuant to Article 6(1)(f) GDPR. The legal bases applicable in each individual case will be outlined in the following sections of this privacy policy.

Notes on forwarding of data to the USA

Our website includes tools from companies based in the USA. If these tools are active, your personal data may be forwarded to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of the EU data protection law. US companies are obliged to disclose personal data to security authorities without you as the data subject being able to take legal action against this. It can thus not be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Enquiries via e-mail, telephone or messengers

If you contact us via e-mail, telephone or messenger services, your enquiry including all personal data included therein (name and enquiry) will be stored and processed by us for the purpose of handling your request. We will not forward this data without your consent.

Processing of this data takes places pursuant to Article 6(1)(b) GDPR, provided that your enquiry is related to the performance of a contract or is required in order to take steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in effectively handling enquiries directed at us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), provided that such consent was requested; consent may be revoked at any time.

The data you send us via contact requests remains with us until you request us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – particularly legal retention periods – remain unaffected.

Use of our contact form

If you submit your enquiry via our contact form, you must provide the information marked as mandatory fields so that we know who the enquiry is from and can respond to it. Additional information may be provided on a voluntary basis.

Data processing for the purpose of contacting us takes place pursuant to Article 6(1)(b) GDPR in order to take steps prior to entering into a contract that follow after your enquiry.

If data is no longer needed in the context of a customer or prospect relationship, or if a conflicting interest on the part of the customer takes precedence, we will delete the relevant data, provided that no legal retention requirements prevent us from doing so.

LinkedIn

 We use LinkedIn Corporation components on our website. You can access our company page on LinkedIn by clicking on the corresponding link on our website. LinkedIn is also a social network.

 The operating company of LinkedIn is the LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.

 If you follow the link to our LinkedIn page, LinkedIn receives information via the LinkedIn component indicating that the data subject has visited our website.

 The data policy published by LinkedIn, available at https://www.linkedin.com/legal/privacy-policy, provides information about the collection, processing and use of personal data by LinkedIn.

Facebook

 We have a profile (business page) on Facebook. When you visit our Facebook profile, the platform operator collects, processes and stores your personal data. This also takes place if you do not have a Facebook account.

 The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Meta” or “Facebook”). User data may also be transferred outside the European Union, in particular to the USA, and processed there. Meta has obtained certification in accordance with the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection for data transfers to the USA pursuant to Article 45 GDPR.

 Data processing controller:

 If we process your data ourselves as part of our profile (e.g. evaluation of page insights, replies to messages or comments), we are the controller within the meaning of Article 4(7) GDPR.

• With regard to the processing of data from visitors to our business page as part of the statistics feature provided by Meta (“Insights”), we and Meta are joint controllers pursuant to Article 26 GDPR. For this purpose, we have entered into a respective agreement with Meta (“Page Insights Controller Addendum”), available at: https://www.facebook.com/legal/terms/page_controller_addendum.
• Meta is solely responsible for any further processing of personal data, in particular for creating user profiles, placing personalised advertising and setting cookies.

Purpose and legal basis for processing:

 We process your data for the purpose of presenting our company, communicating with (prospective) customers as well as for providing information about our products and services. The legal basis is Article 6(1)(f) GDPR (legitimate interest in modern public relations). If you have consented to the processing (e.g. by adjusting the settings in your Facebook account), the legal basis is Article 6(1)(a) GDPR.

 Page Insights:

 Being the operator of the business page, Meta provides us with anonymised statistics (“Insights”) on the use of our page. These statistics are created based on personal data collected by Meta in connection with your visit to our page. We and Meta are jointly responsible for the data processing involved. We have no influence on the actual collection and processing of the data by Meta.

 Data subject rights:

 You are granted the data subject rights provided for in the GDPR, in particular the right to access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection (Article 21 GDPR). You can exercise these rights both with us and directly with Meta. In accordance with the joint agreement, Meta has committed to assuming primary responsibility for observing the data subject rights in connection with Page Insights.

 

For further information on data processing by Meta as well as your rights and configuration options with regard to the protection of your privacy, please refer to Meta’s privacy policy at: https://www.facebook.com/privacy/policy.

Cookies

Our website uses cookies. A cookie is a data set that is created upon accessing a website and temporarily stored on the website user's system. If the website user accesses our website server again, the website user's browser sends the previously received cookie back to the server. The server can analyse the information obtained through this procedure. Cookies can, for example, facilitate navigation on a website. Cookies are partly required to enable our website to function properly (the legal basis is Article 6(1)(f) GDPR: for the purposes of the legitimate interests pursued by the website operator; we only use cookies in compliance with Article 5(1)(a) GDPR, i.e. pursuant to the principles of “lawfulness, fairness and transparency”).

If you wish to generally prohibit the use of cookies, you can do so by making local settings in your web browser (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).

In terms of cookies that are not technically necessary, this privacy policy provides further information on cookies used by tools and plug-ins.

Links to third-party websites

This website provides links to third-party websites in the form of hyperlinks. Data is only transmitted to the link destination after clicking on such a hyperlink. This is technically required. In particular, the transmitted data is: your IP address, the time you clicked the link, the page on which you clicked the link and information about your web browser. If you do not wish for this data to be transmitted to the link destination, do not click the link.

OpenStreetMap

This website uses the OpenStreetMap map service. The provider is OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

To use the functions of OpenStreetMap, it is necessary to process your IP address. This information is usually transferred to and processed on an OpenStreetMap server in the United Kingdom. The provider of this website has no influence on the data transfer. More information on the approach to user data can be found in OpenStreetMap's privacy policy: https://osmfoundation.org/wiki/Privacy_Policy.

OpenStreetMap is used in the interest of an attractive and user-friendly presentation of our online services and the easy access to specified locations. This is a legitimate interest within the meaning of Article 6(1)(f) GDPR.

If personal data is transferred to the United Kingdom, the transfer takes place based on the adequacy decision of the European Commission for the United Kingdom.

For reasons relating to your particular situation, you have the right to object to this processing pursuant to Article 21 GDPR at any time.

Google Tag Manager

We use the Google Tag Manager from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager is an assistance service, which does not process any personal data itself. The tool triggers other components, which in turn may collect data themselves. Google Tag Manager does not access this data. If tags have been deactivated at domain or cookie level, the deactivation applies to all tracking tags implemented via Google Tag Manager. More information on Google Tag Manager can be found in Google's privacy policy.

Data subject rights

As we are processing your personal data, you have the following rights:

• Right of access – Pursuant to Article 15 GDPR, you may request access to your personal data processed by us.
• Rectification – Pursuant to Article 16 GDPR, you may request without undue delay the rectification of inaccurate or the completion of personal data stored with us.
• Erasure – Pursuant to Article 17 GDPR, you may request the erasure of your personal data stored by us.
• Restriction – Pursuant to Article 18 GDPR, you may request the restriction of the processing of your personal data.
• Data portability – Pursuant to Article 20 GDPR, you may receive your personal data in a structured, commonly used and machine-readable format.
• Right to object – If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right, pursuant to Article 21 GDPR, to object to the processing of your personal data.
• Automated decision-making – Being a responsible company, we do not use automated decision-making or profiling.
  If you want to exercise your right of withdrawal or right to object, sending us an e-mail will suffice.

Right to lodge a complaint with the supervisory authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection authority with regard to the processing of your personal data if you consider that it infringes the GDPR. You may contact the supervisory authority of your habitual residence, place of work or place of the alleged infringement.

A list of responsible supervisory authorities can be found at: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

The data protection authority responsible for us can be contacted at:
ULD, Postfach 71 16, 24171 Kiel or via e-mail at mail@datenschutzzentrum.de

Security notice

During your visit to our website, we use the common SSL (Secure Socket Layer) procedure for encryption. The symbol showing the closed key or padlock in the status bar of your browser indicates whether a particular site of our website is transmitted in encrypted form.

Furthermore, we make use of suitable technical and organisational security measures pursuant to Article 32 GDPR to protect your data from accidental or intentional manipulation, partial or total loss, destruction as well as from unauthorised access, unauthorised modification or unauthorised disclosure by third parties. Our security measures are continuously improved in line with technological developments.

Despite all due diligence, full protection against all threats is not always possible. Since complete data security cannot be guaranteed for unencrypted communication via e-mail, we recommend that you submit confidential matter to us exclusively via postal services or encrypted electronic communication.

Definitions

This privacy policy shall be based on the terminology of the European Union General Data Protection Regulation (GDPR). Important terminology is explained in the following:

Personal data

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject

“Data subject” is any identified or identifiable natural person, whose personal data is processed by the controller.

Processing

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing

“Restriction of processing” means the marking of stored personal data with the aim of limiting its processing in the future.

Profiling

“Profiling” means any form of automated processing of personal data consisting of the use of this personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Pseudonymisation

“Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

Controller

“Controller” means the natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor

“Processor” means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

Recipient

“Recipient” means a natural or legal person, public authority, agency or another body to whom the personal data is disclosed, whether a third party or not.

Third party

“Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Consent

“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

Changes to this privacy policy

We reserve the right to change this privacy policy if legislation, online services or data-collection techniques change. This shall apply, however, only to declarations on data processing. If the consent of the user is required, or if parts of the privacy policy contain a regulation of contractual relationships with users, the privacy policy will only be changed with the user’s consent.

Be therefore sure to inform yourself on this privacy policy, if required, especially if you provide personal data.

Last updated: July 2026

Reviewed by:
digitalNORD GmbH Kiel https://digital-nord.de