Data protection

Personal data is any information relating to an identified or identifiable natural person, such as your name or email address. “Processing of data” refers in particular to the collection, storage, use, and transmission of your data.

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) sentence 1 lit. a GDPR serves as the legal basis.

When processing personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) sentence 1 lit. c GDPR serves as the legal basis.

In cases where processing personal data is necessary to protect the vital interests of the data subject or another natural person, Art. 6 (1) sentence 1 lit. d GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis.

The personal data of data subjects will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage beyond this may occur if required by law. Data will also be blocked or deleted once any statutory retention period expires, unless further storage is necessary for concluding or fulfilling a contract.

Further information on the legal bases for processing and storage duration of specific personal data can be found in the respective subsections.

​

1. Rights of the Data Subject

Individual Rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller (subject to any conditions set out in the respective provisions):

• Right of access (Art. 15 GDPR),

• Right to rectification and erasure (Art. 16, 17 GDPR),

• Right to restriction of processing (Art. 18 GDPR),

• Right to withdraw consent if you have given consent to processing,

• Right to data portability (Art. 20 GDPR)

 

Right to Object

Where we process personal data to protect overriding legitimate interests as part of a balancing of interests, you may object to such processing with effect for the future, but only on grounds relating to your particular situation (Art. 21 GDPR). If processing is carried out for direct marketing purposes, you may object at any time without providing reasons. After a justified objection, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims. This limitation does not apply to processing for direct marketing purposes.

 

Complaint

If you believe that we are not respecting your rights as required, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. However, before doing so, we would appreciate if you contact us first so we can address your concerns directly.

 

2. Visiting the Website and Logfiles

Scope of Processing Personal Data

Each time our website is accessed, our system automatically collects the following data and information from the accessing computer:

• Information about the browser type and version used

• The user’s operating system

• The user’s internet service provider

• The user’s IP address

• Date and time of access

• Websites from which the user’s system accesses our website

• Websites accessed by the user’s system via our website

These data are stored in our system’s logfiles.

 

3. Legal Basis for Processing Personal Data

The legal basis for collecting and storing these data is Art. 6 (1) lit. f GDPR.

3.1 Purpose of Data Processing

Temporary storage of the IP address is necessary to display the website to you. For this purpose, the IP address must remain stored for the duration of the session. The remaining data are collected for technical reasons to ensure stability and security.

This also constitutes the legitimate interest in processing under Art. 6 (1) lit. f GDPR.

3.2 Duration of Storage

Data are deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. For data collected to provide the website, this is the case once the session ends.

Data stored in logfiles will be deleted after no more than seven days. Storage beyond this may be possible. In such cases, IP addresses are anonymized so that assignment to the accessing client is no longer possible.

​

4. Contact Form

4.1 Scope of Processing Personal Data

You may use the contact form provided on our website to contact us. The data entered into the form are transmitted to and stored by us. These include at minimum:

• First name

• Last name

• Email address

• Your message to us

Additionally, upon submission, the following data are collected and stored:

• Your IP address

• Date and time of use

These data are processed to respond to your inquiry. You are not obligated to provide your personal data; however, without them, we cannot respond.

 

5. Legal Basis for Processing Personal Data

If you transmit your data to us in a pre-contractual context (e.g., requesting an offer or asking questions about our products), Art. 6 (1) lit. b GDPR is the legal basis. In all other cases, Art. 6 (1) lit. f GDPR applies.

5.1 Purpose of Data Processing

Processing personal data from the input form serves solely to handle the contact request. If contact is made via email, this also constitutes our legitimate interest.

The additional data collected during submission help prevent misuse of the contact form and ensure the security of our IT systems.

5.2 Duration of Storage

Your data will be deleted when it can be inferred from the circumstances that your inquiry or the matter in question has been conclusively resolved.

The additional data collected during submission are deleted after a maximum of seven days.

5.3 Other Forms of Contact

5.3.1 Scope of Processing Personal Data

If you contact us via email, post, or any other method, the data you provide (e.g., your email address, possibly your name and phone number) will be processed to address or respond to your inquiry.

5.3.2 Legal Basis

If you transmit your data in a pre-contractual context, Art. 6 (1) lit. b GDPR applies. If you have given consent, Art. 6 (1) lit. a GDPR applies. Otherwise, Art. 6 (1) lit. f GDPR is used.

5.3.3 Purpose

Processing personal data serves solely to handle the contact request, which may also constitute our legitimate interest.

5.3.4 Storage Duration

Your data will be deleted once it is clear from the circumstances that your inquiry or the matter in question has been conclusively resolved.

​

6. Newsletter

Scope of Processing Personal Data

You can subscribe to a newsletter on our website. To do so, you must provide your email address in the corresponding form.

The following data are transmitted to and stored by us:

• First name

• Last name

• Company

• Email address

Additionally, the following data are collected upon submission:

• User’s IP address

• Date and time of use

During the registration process, we obtain your consent and refer you to this privacy policy.

​

Legal Basis

The legal basis for processing is Art. 6 (1) lit. a and lit. f GDPR.

​

Purpose

Collecting and storing the email address enables us to send you the newsletter.

​

Storage Duration

Data are stored as long as you remain subscribed to the newsletter. You may cancel your subscription at any time, i.e., revoke your consent or object to further receipt. A link to unsubscribe is included at the end of every newsletter.

​

7. Categories of Recipients of Personal Data

Transfer of personal data to third parties occurs only in the cases described in this declaration or where we explicitly inform you elsewhere. In addition, we use external processors (Art. 28 GDPR) for some services (e.g., hosting providers, email providers). These processors handle personal data exclusively within the European Union.

​

​